Загрузка данных


c:\Documents and Settings\All Users\Microsoft\Diagnosis\	mod
EventStore.db-wal		2026-10-07 00:08.04	115,392	---A--	old
		2026-10-07 00:09.11	210,152	---A--	new
c:\Documents and Settings\All Users\Microsoft\OFFICE\Heartbeat\	mod
HeartbeatCache.xml		2026-10-07 00:09.24	118	---A--	add
c:\Documents and Settings\All Users\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\	mod
SystemIndex.6.Crwl		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:06.27	2	---A--	new
SystemIndex.6.gthr		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:07.36	486	---A--	new
c:\Documents and Settings\All Users\Microsoft\Windows Defender\Scans\	mod
mpenginedb.db		2026-10-06 22:21.58	405,504	---A--	old
		2026-10-07 00:11.30	405,504	---A--	new
mpenginedb.db-wal		2026-10-07 00:07.05	28,872	---A--	old
		2026-10-07 00:11.30	383,192	---A--	new
c:\Documents and Settings\All Users\Microsoft\Windows Defender\Scans\History\Store\	mod
152284B8B8AE57220B354D4905ABD83E		2026-10-06 22:18.03	1,604	---A--	del
7D9931CC4561C79DDCC976E14181BDF1		2026-10-07 00:09.23	1,527	---A--	add
c:\Documents and Settings\All Users\USOPrivate\UpdateStore\	mod
updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml		2026-10-07 00:09.00	11,222	---A--	old
		2026-10-07 00:10.00	11,222	---A--	new
c:\Documents and Settings\All Users\USOShared\Logs\	mod
NotificationUx.4ddf95f2-8541-4b39-ac67-faea6f03aab3.1.etl		2023-06-12 03:23.03	8,192	---A--	del
NotificationUx.62d63a25-da6a-4c75-be6b-e026ba32302f.1.etl		2026-10-07 00:09.23	8,192	---A--	add
NotificationUxBroker.0bcfdeb8-b442-43e6-b4ad-895a111a6d2f.1.etl		2026-10-07 00:09.24	12,288	---A--	add
UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:08.02	16,384	------	new
UsoCoreWorker.57f073e5-659d-4555-80ee-896bb9af823b.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:09.06	8,192	---A--	new
UsoCoreWorker.8e2513eb-b892-48a8-b7af-09a586d322f2.1.etl		2026-10-07 00:10.06	8,192	---A--	add
c:\Documents and Settings\user\	mod
NTUSER.DAT		2026-10-06 22:21.57	1,310,720	-H-A--	old
		2026-10-06 22:21.57	1,572,864	-H-A--	new
ntuser.dat.LOG1		2023-06-11 23:08.35	483,328	-HSA--	old
		2023-06-11 23:08.35	392,192	-HSA--	new
ntuser.dat.LOG2		2023-06-11 23:08.35	221,184	-HSA--	old
		2023-06-11 23:08.35	966,656	-HSA--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Comms\UnistoreDB\	mod
USS.jtx		2026-10-07 00:07.13	3,145,728	---A--	old
		2026-10-07 00:09.13	3,145,728	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\ConnectedDevicesPlatform\L.user\	mod
ActivitiesCache.db-wal		2026-10-07 00:07.09	45,352	---A--	old
		2026-10-07 00:08.38	531,512	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Office\16.0\	mod
winword.exe_Rules.xml		2026-10-06 02:50.20	7	---A--	old
		2026-10-07 00:11.51	7	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Vault\UserProfileRoaming\	mod
Latest.dat		2026-10-06 22:17.06	1	---A--	old
		2026-10-07 00:09.36	1	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\	mod
UsrClass.dat.LOG1		2023-06-11 23:08.35	1,449,984	-HSA--	old
		2023-06-11 23:08.35	524,288	-HSA--	new
UsrClass.dat.LOG2		2023-06-11 23:08.35	1,100,800	-HSA--	old
		2023-06-11 23:08.35	1,142,784	-HSA--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\INetCache\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\INetCache\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Microsoft\Windows\WebCache\	mod
WebCacheV01.dat		2026-10-07 00:06.27	33,030,144	---A--	old
		2026-10-07 00:11.50	33,554,432	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\	mod
~DFEBB2D9BE0E3B2FE9.TMP		2026-10-07 00:06.28	0	---A--	old
		2026-10-07 00:06.44	16,384	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\	mod
settings.dat.LOG1		2023-06-11 23:09.19	49,152	-HSA--	old
		2023-06-11 23:09.19	74,752	-HSA--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Temp\	mod
mat-debug-5912.log		2026-10-07 00:11.26	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\	mod
HxCommAlwaysOnLog.etl		2026-10-07 00:07.13	65,536	---A--	old
		2026-10-07 00:11.26	65,536	---A--	new
HxCommAlwaysOnLog_Old.etl		2026-10-06 22:14.43	65,536	---A--	old
		2026-10-07 00:07.13	65,536	---A--	new
HxStore.hxd		2026-10-07 00:07.29	4,194,304	---A--	old
		2026-10-07 00:11.41	4,194,304	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\	mod
settings.dat		2026-10-07 00:07.39	32,768	---A--	old
		2026-10-07 00:11.51	32,768	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState\	mod
d5a8f02229be41efb047bd8f883ba799.db.ses		2026-10-07 00:07.13	53	---A--	old
		2026-10-07 00:11.26	53	---A--	new
c:\Documents and Settings\user\AppData\Local\Application Data\Temp\	mod
TVUNSS3.exe		2026-10-07 00:11.58	0	---A--	add
{1FF0DA39-0737-4E9A-A689-88B01E7377EE} - OProcSessId.dat		2026-10-07 00:11.50	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Application Data\Temp\VBE\	add
c:\Documents and Settings\user\AppData\Local\Application Data\Temp\Word8.0\	add
MSForms.exd		2026-10-07 00:11.57	171,496	---A--	add
c:\Documents and Settings\user\AppData\Local\Comms\UnistoreDB\	mod
USS.jtx		2026-10-07 00:07.13	3,145,728	---A--	old
		2026-10-07 00:09.13	3,145,728	---A--	new
c:\Documents and Settings\user\AppData\Local\ConnectedDevicesPlatform\L.user\	mod
ActivitiesCache.db-wal		2026-10-07 00:07.09	45,352	---A--	old
		2026-10-07 00:08.38	531,512	---A--	new
c:\Documents and Settings\user\AppData\Local\Microsoft\Office\16.0\	mod
winword.exe_Rules.xml		2026-10-06 02:50.20	7	---A--	old
		2026-10-07 00:11.51	7	---A--	new
c:\Documents and Settings\user\AppData\Local\Microsoft\Vault\UserProfileRoaming\	mod
Latest.dat		2026-10-06 22:17.06	1	---A--	old
		2026-10-07 00:09.36	1	---A--	new
c:\Documents and Settings\user\AppData\Local\Microsoft\Windows\	mod
UsrClass.dat.LOG1		2023-06-11 23:08.35	1,449,984	-HSA--	old
		2023-06-11 23:08.35	524,288	-HSA--	new
UsrClass.dat.LOG2		2023-06-11 23:08.35	1,100,800	-HSA--	old
		2023-06-11 23:08.35	1,142,784	-HSA--	new
c:\Documents and Settings\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Documents and Settings\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Microsoft\Windows\WebCache\	mod
WebCacheV01.dat		2026-10-07 00:06.27	33,030,144	---A--	old
		2026-10-07 00:11.50	33,554,432	---A--	new
c:\Documents and Settings\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\	mod
~DFEBB2D9BE0E3B2FE9.TMP		2026-10-07 00:06.28	0	---A--	old
		2026-10-07 00:06.44	16,384	---A--	new
c:\Documents and Settings\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\	mod
settings.dat.LOG1		2023-06-11 23:09.19	49,152	-HSA--	old
		2023-06-11 23:09.19	74,752	-HSA--	new
c:\Documents and Settings\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Temp\	mod
mat-debug-5912.log		2026-10-07 00:11.26	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\	mod
HxCommAlwaysOnLog.etl		2026-10-07 00:07.13	65,536	---A--	old
		2026-10-07 00:11.26	65,536	---A--	new
HxCommAlwaysOnLog_Old.etl		2026-10-06 22:14.43	65,536	---A--	old
		2026-10-07 00:07.13	65,536	---A--	new
HxStore.hxd		2026-10-07 00:07.29	4,194,304	---A--	old
		2026-10-07 00:11.41	4,194,304	---A--	new
c:\Documents and Settings\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\	mod
settings.dat		2026-10-07 00:07.39	32,768	---A--	old
		2026-10-07 00:11.51	32,768	---A--	new
c:\Documents and Settings\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState\	mod
d5a8f02229be41efb047bd8f883ba799.db.ses		2026-10-07 00:07.13	53	---A--	old
		2026-10-07 00:11.26	53	---A--	new
c:\Documents and Settings\user\AppData\Local\Temp\	mod
TVUNSS3.exe		2026-10-07 00:11.58	0	---A--	add
{1FF0DA39-0737-4E9A-A689-88B01E7377EE} - OProcSessId.dat		2026-10-07 00:11.50	0	---A--	add
c:\Documents and Settings\user\AppData\Local\Temp\VBE\	add
c:\Documents and Settings\user\AppData\Local\Temp\Word8.0\	add
MSForms.exd		2026-10-07 00:11.57	171,496	---A--	add
c:\Documents and Settings\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\	mod
57C8EDB95DF3F0AD4EE2DC2B8CFD4157		2026-10-06 22:17.42	342	--SA--	old
		2026-10-07 00:09.04	342	--SA--	new
E8F4D3CDDBAEF4946F29729034C35C01		2026-10-07 00:07.08	246	--SA--	old
		2026-10-07 00:09.04	246	--SA--	new
FB0D848F74F70BB2EAA93746D24D9749		2026-10-06 22:17.42	330	--SA--	old
		2026-10-07 00:09.04	330	--SA--	new
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Office\Последние файлы\	mod
GreyEnergyDropper.doc.LNK		2026-10-07 00:11.52	1,258	---A--	add
index.dat		2026-10-06 02:50.37	106	-H----	old
		2026-10-07 00:11.52	171	-H----	new
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Windows\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\	mod
~$Normal.dotm		2026-10-07 00:11.51	162	-H-A--	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\1049\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\1049\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Bibliography Styles\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\1049\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\1049\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Bibliography Styles\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\	add
c:\Documents and Settings\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\1049\	add
c:\Documents and Settings\user\Application Data\Microsoft\Office\Последние файлы\	mod
GreyEnergyDropper.doc.LNK		2026-10-07 00:11.52	1,258	---A--	add
index.dat		2026-10-06 02:50.37	106	-H----	old
		2026-10-07 00:11.52	171	-H----	new
c:\Documents and Settings\user\Application Data\Microsoft\Windows\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Documents and Settings\user\Application Data\Microsoft\Windows\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Documents and Settings\user\Application Data\Microsoft\Windows\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\	mod
~$Normal.dotm		2026-10-07 00:11.51	162	-H-A--	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\1049\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\1049\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Bibliography Styles\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\1049\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\1049\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Bibliography Styles\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\	add
c:\Documents and Settings\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\1049\	add
c:\Documents and Settings\user\Desktop\lab1\src\	mod
~$eyEnergyDropper.doc		2026-10-07 00:11.51	162	-H-A--	add
c:\Documents and Settings\user\Desktop\tools\SysTracer x64\	mod
SysTracer.cfg		2026-10-07 00:07.07	1,536	---A--	old
		2026-10-07 00:09.16	1,536	---A--	new
SysTracerLog.txt		2023-09-08 13:32.51	343	---A--	old
		2026-10-07 00:09.16	454	---A--	new
c:\Documents and Settings\user\Desktop\tools\SysTracer x64\data\	mod
snap-1.tmp		2026-10-07 00:09.02	0	---A--	del
snap-2.tmp		2026-10-07 00:13.11	0	---A--	add
snap004.snp		2026-10-07 00:09.16	22,447,240	---A--	add
c:\Documents and Settings\user\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Documents and Settings\user\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Documents and Settings\user\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\ProgramData\Application Data\Microsoft\Diagnosis\	mod
EventStore.db-wal		2026-10-07 00:08.04	115,392	---A--	old
		2026-10-07 00:09.11	210,152	---A--	new
c:\ProgramData\Application Data\Microsoft\OFFICE\Heartbeat\	mod
HeartbeatCache.xml		2026-10-07 00:09.24	118	---A--	add
c:\ProgramData\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\	mod
SystemIndex.6.Crwl		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:06.27	2	---A--	new
SystemIndex.6.gthr		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:07.36	486	---A--	new
c:\ProgramData\Application Data\Microsoft\Windows Defender\Scans\	mod
mpenginedb.db		2026-10-06 22:21.58	405,504	---A--	old
		2026-10-07 00:11.30	405,504	---A--	new
mpenginedb.db-wal		2026-10-07 00:07.05	28,872	---A--	old
		2026-10-07 00:11.30	383,192	---A--	new
c:\ProgramData\Application Data\Microsoft\Windows Defender\Scans\History\Store\	mod
152284B8B8AE57220B354D4905ABD83E		2026-10-06 22:18.03	1,604	---A--	del
7D9931CC4561C79DDCC976E14181BDF1		2026-10-07 00:09.23	1,527	---A--	add
c:\ProgramData\Application Data\USOPrivate\UpdateStore\	mod
updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml		2026-10-07 00:09.00	11,222	---A--	old
		2026-10-07 00:10.00	11,222	---A--	new
c:\ProgramData\Application Data\USOShared\Logs\	mod
NotificationUx.4ddf95f2-8541-4b39-ac67-faea6f03aab3.1.etl		2023-06-12 03:23.03	8,192	---A--	del
NotificationUx.62d63a25-da6a-4c75-be6b-e026ba32302f.1.etl		2026-10-07 00:09.23	8,192	---A--	add
NotificationUxBroker.0bcfdeb8-b442-43e6-b4ad-895a111a6d2f.1.etl		2026-10-07 00:09.24	12,288	---A--	add
UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:08.02	16,384	------	new
UsoCoreWorker.57f073e5-659d-4555-80ee-896bb9af823b.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:09.06	8,192	---A--	new
UsoCoreWorker.8e2513eb-b892-48a8-b7af-09a586d322f2.1.etl		2026-10-07 00:10.06	8,192	---A--	add
c:\ProgramData\Microsoft\Diagnosis\	mod
EventStore.db-wal		2026-10-07 00:08.04	115,392	---A--	old
		2026-10-07 00:09.11	210,152	---A--	new
c:\ProgramData\Microsoft\OFFICE\Heartbeat\	mod
HeartbeatCache.xml		2026-10-07 00:09.24	118	---A--	add
c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\	mod
SystemIndex.6.Crwl		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:06.27	2	---A--	new
SystemIndex.6.gthr		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:07.36	486	---A--	new
c:\ProgramData\Microsoft\Windows Defender\Scans\	mod
mpenginedb.db		2026-10-06 22:21.58	405,504	---A--	old
		2026-10-07 00:11.30	405,504	---A--	new
mpenginedb.db-wal		2026-10-07 00:07.05	28,872	---A--	old
		2026-10-07 00:11.30	383,192	---A--	new
c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store\	mod
152284B8B8AE57220B354D4905ABD83E		2026-10-06 22:18.03	1,604	---A--	del
7D9931CC4561C79DDCC976E14181BDF1		2026-10-07 00:09.23	1,527	---A--	add
c:\ProgramData\USOPrivate\UpdateStore\	mod
updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml		2026-10-07 00:09.00	11,222	---A--	old
		2026-10-07 00:10.00	11,222	---A--	new
c:\ProgramData\USOShared\Logs\	mod
NotificationUx.4ddf95f2-8541-4b39-ac67-faea6f03aab3.1.etl		2023-06-12 03:23.03	8,192	---A--	del
NotificationUx.62d63a25-da6a-4c75-be6b-e026ba32302f.1.etl		2026-10-07 00:09.23	8,192	---A--	add
NotificationUxBroker.0bcfdeb8-b442-43e6-b4ad-895a111a6d2f.1.etl		2026-10-07 00:09.24	12,288	---A--	add
UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:08.02	16,384	------	new
UsoCoreWorker.57f073e5-659d-4555-80ee-896bb9af823b.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:09.06	8,192	---A--	new
UsoCoreWorker.8e2513eb-b892-48a8-b7af-09a586d322f2.1.etl		2026-10-07 00:10.06	8,192	---A--	add
c:\Users\All Users\Microsoft\Diagnosis\	mod
EventStore.db-wal		2026-10-07 00:08.04	115,392	---A--	old
		2026-10-07 00:09.11	210,152	---A--	new
c:\Users\All Users\Microsoft\OFFICE\Heartbeat\	mod
HeartbeatCache.xml		2026-10-07 00:09.24	118	---A--	add
c:\Users\All Users\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\	mod
SystemIndex.6.Crwl		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:06.27	2	---A--	new
SystemIndex.6.gthr		2026-10-07 00:06.27	0	---A--	old
		2026-10-07 00:07.36	486	---A--	new
c:\Users\All Users\Microsoft\Windows Defender\Scans\	mod
mpenginedb.db		2026-10-06 22:21.58	405,504	---A--	old
		2026-10-07 00:11.30	405,504	---A--	new
mpenginedb.db-wal		2026-10-07 00:07.05	28,872	---A--	old
		2026-10-07 00:11.30	383,192	---A--	new
c:\Users\All Users\Microsoft\Windows Defender\Scans\History\Store\	mod
152284B8B8AE57220B354D4905ABD83E		2026-10-06 22:18.03	1,604	---A--	del
7D9931CC4561C79DDCC976E14181BDF1		2026-10-07 00:09.23	1,527	---A--	add
c:\Users\All Users\USOPrivate\UpdateStore\	mod
updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml		2026-10-07 00:09.00	11,222	---A--	old
		2026-10-07 00:10.00	11,222	---A--	new
c:\Users\All Users\USOShared\Logs\	mod
NotificationUx.4ddf95f2-8541-4b39-ac67-faea6f03aab3.1.etl		2023-06-12 03:23.03	8,192	---A--	del
NotificationUx.62d63a25-da6a-4c75-be6b-e026ba32302f.1.etl		2026-10-07 00:09.23	8,192	---A--	add
NotificationUxBroker.0bcfdeb8-b442-43e6-b4ad-895a111a6d2f.1.etl		2026-10-07 00:09.24	12,288	---A--	add
UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:08.02	16,384	------	new
UsoCoreWorker.57f073e5-659d-4555-80ee-896bb9af823b.1.etl		2026-10-07 00:08.00	0	------	old
		2026-10-07 00:09.06	8,192	---A--	new
UsoCoreWorker.8e2513eb-b892-48a8-b7af-09a586d322f2.1.etl		2026-10-07 00:10.06	8,192	---A--	add
c:\Users\user\	mod
NTUSER.DAT		2026-10-06 22:21.57	1,310,720	-H-A--	old
		2026-10-06 22:21.57	1,572,864	-H-A--	new
ntuser.dat.LOG1		2023-06-11 23:08.35	483,328	-HSA--	old
		2023-06-11 23:08.35	392,192	-HSA--	new
ntuser.dat.LOG2		2023-06-11 23:08.35	221,184	-HSA--	old
		2023-06-11 23:08.35	966,656	-HSA--	new
c:\Users\user\AppData\Local\Application Data\Comms\UnistoreDB\	mod
USS.jtx		2026-10-07 00:07.13	3,145,728	---A--	old
		2026-10-07 00:09.13	3,145,728	---A--	new
c:\Users\user\AppData\Local\Application Data\ConnectedDevicesPlatform\L.user\	mod
ActivitiesCache.db-wal		2026-10-07 00:07.09	45,352	---A--	old
		2026-10-07 00:08.38	531,512	---A--	new
c:\Users\user\AppData\Local\Application Data\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Office\16.0\	mod
winword.exe_Rules.xml		2026-10-06 02:50.20	7	---A--	old
		2026-10-07 00:11.51	7	---A--	new
c:\Users\user\AppData\Local\Application Data\Microsoft\Vault\UserProfileRoaming\	mod
Latest.dat		2026-10-06 22:17.06	1	---A--	old
		2026-10-07 00:09.36	1	---A--	new
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\	mod
UsrClass.dat.LOG1		2023-06-11 23:08.35	1,449,984	-HSA--	old
		2023-06-11 23:08.35	524,288	-HSA--	new
UsrClass.dat.LOG2		2023-06-11 23:08.35	1,100,800	-HSA--	old
		2023-06-11 23:08.35	1,142,784	-HSA--	new
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\INetCache\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\INetCache\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Microsoft\Windows\WebCache\	mod
WebCacheV01.dat		2026-10-07 00:06.27	33,030,144	---A--	old
		2026-10-07 00:11.50	33,554,432	---A--	new
c:\Users\user\AppData\Local\Application Data\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\	mod
~DFEBB2D9BE0E3B2FE9.TMP		2026-10-07 00:06.28	0	---A--	old
		2026-10-07 00:06.44	16,384	---A--	new
c:\Users\user\AppData\Local\Application Data\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\	mod
settings.dat.LOG1		2023-06-11 23:09.19	49,152	-HSA--	old
		2023-06-11 23:09.19	74,752	-HSA--	new
c:\Users\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Temp\	mod
mat-debug-5912.log		2026-10-07 00:11.26	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\	mod
HxCommAlwaysOnLog.etl		2026-10-07 00:07.13	65,536	---A--	old
		2026-10-07 00:11.26	65,536	---A--	new
HxCommAlwaysOnLog_Old.etl		2026-10-06 22:14.43	65,536	---A--	old
		2026-10-07 00:07.13	65,536	---A--	new
HxStore.hxd		2026-10-07 00:07.29	4,194,304	---A--	old
		2026-10-07 00:11.41	4,194,304	---A--	new
c:\Users\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\	mod
settings.dat		2026-10-07 00:07.39	32,768	---A--	old
		2026-10-07 00:11.51	32,768	---A--	new
c:\Users\user\AppData\Local\Application Data\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState\	mod
d5a8f02229be41efb047bd8f883ba799.db.ses		2026-10-07 00:07.13	53	---A--	old
		2026-10-07 00:11.26	53	---A--	new
c:\Users\user\AppData\Local\Application Data\Temp\	mod
TVUNSS3.exe		2026-10-07 00:11.58	0	---A--	add
{1FF0DA39-0737-4E9A-A689-88B01E7377EE} - OProcSessId.dat		2026-10-07 00:11.50	0	---A--	add
c:\Users\user\AppData\Local\Application Data\Temp\VBE\	add
c:\Users\user\AppData\Local\Application Data\Temp\Word8.0\	add
MSForms.exd		2026-10-07 00:11.57	171,496	---A--	add
c:\Users\user\AppData\Local\Comms\UnistoreDB\	mod
USS.jtx		2026-10-07 00:07.13	3,145,728	---A--	old
		2026-10-07 00:09.13	3,145,728	---A--	new
c:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\	mod
ActivitiesCache.db-wal		2026-10-07 00:07.09	45,352	---A--	old
		2026-10-07 00:08.38	531,512	---A--	new
c:\Users\user\AppData\Local\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\AppData\Local\Microsoft\Office\16.0\	mod
winword.exe_Rules.xml		2026-10-06 02:50.20	7	---A--	old
		2026-10-07 00:11.51	7	---A--	new
c:\Users\user\AppData\Local\Microsoft\Vault\UserProfileRoaming\	mod
Latest.dat		2026-10-06 22:17.06	1	---A--	old
		2026-10-07 00:09.36	1	---A--	new
c:\Users\user\AppData\Local\Microsoft\Windows\	mod
UsrClass.dat.LOG1		2023-06-11 23:08.35	1,449,984	-HSA--	old
		2023-06-11 23:08.35	524,288	-HSA--	new
UsrClass.dat.LOG2		2023-06-11 23:08.35	1,100,800	-HSA--	old
		2023-06-11 23:08.35	1,142,784	-HSA--	new
c:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\AppData\Local\Microsoft\Windows\WebCache\	mod
WebCacheV01.dat		2026-10-07 00:06.27	33,030,144	---A--	old
		2026-10-07 00:11.50	33,554,432	---A--	new
c:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\	mod
~DFEBB2D9BE0E3B2FE9.TMP		2026-10-07 00:06.28	0	---A--	old
		2026-10-07 00:06.44	16,384	---A--	new
c:\Users\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\	mod
settings.dat.LOG1		2023-06-11 23:09.19	49,152	-HSA--	old
		2023-06-11 23:09.19	74,752	-HSA--	new
c:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Temp\	mod
mat-debug-5912.log		2026-10-07 00:11.26	0	---A--	add
c:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\	mod
HxCommAlwaysOnLog.etl		2026-10-07 00:07.13	65,536	---A--	old
		2026-10-07 00:11.26	65,536	---A--	new
HxCommAlwaysOnLog_Old.etl		2026-10-06 22:14.43	65,536	---A--	old
		2026-10-07 00:07.13	65,536	---A--	new
HxStore.hxd		2026-10-07 00:07.29	4,194,304	---A--	old
		2026-10-07 00:11.41	4,194,304	---A--	new
c:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\	mod
settings.dat		2026-10-07 00:07.39	32,768	---A--	old
		2026-10-07 00:11.51	32,768	---A--	new
c:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState\	mod
d5a8f02229be41efb047bd8f883ba799.db.ses		2026-10-07 00:07.13	53	---A--	old
		2026-10-07 00:11.26	53	---A--	new
c:\Users\user\AppData\Local\Temp\	mod
TVUNSS3.exe		2026-10-07 00:11.58	0	---A--	add
{1FF0DA39-0737-4E9A-A689-88B01E7377EE} - OProcSessId.dat		2026-10-07 00:11.50	0	---A--	add
c:\Users\user\AppData\Local\Temp\VBE\	add
c:\Users\user\AppData\Local\Temp\Word8.0\	add
MSForms.exd		2026-10-07 00:11.57	171,496	---A--	add
c:\Users\user\AppData\Local\Temporary Internet Files\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\AppData\Local\Temporary Internet Files\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\	mod
57C8EDB95DF3F0AD4EE2DC2B8CFD4157		2026-10-06 22:17.42	342	--SA--	old
		2026-10-07 00:09.04	342	--SA--	new
E8F4D3CDDBAEF4946F29729034C35C01		2026-10-07 00:07.08	246	--SA--	old
		2026-10-07 00:09.04	246	--SA--	new
FB0D848F74F70BB2EAA93746D24D9749		2026-10-06 22:17.42	330	--SA--	old
		2026-10-07 00:09.04	330	--SA--	new
c:\Users\user\AppData\Roaming\Microsoft\Office\Последние файлы\	mod
GreyEnergyDropper.doc.LNK		2026-10-07 00:11.52	1,258	---A--	add
index.dat		2026-10-06 02:50.37	106	-H----	old
		2026-10-07 00:11.52	171	-H----	new
c:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\	mod
~$Normal.dotm		2026-10-07 00:11.51	162	-H-A--	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\1049\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\1049\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Bibliography Styles\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\1049\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\1049\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Bibliography Styles\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\	add
c:\Users\user\AppData\Roaming\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\1049\	add
c:\Users\user\Application Data\Microsoft\Office\Последние файлы\	mod
GreyEnergyDropper.doc.LNK		2026-10-07 00:11.52	1,258	---A--	add
index.dat		2026-10-06 02:50.37	106	-H----	old
		2026-10-07 00:11.52	171	-H----	new
c:\Users\user\Application Data\Microsoft\Windows\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Users\user\Application Data\Microsoft\Windows\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Users\user\Application Data\Microsoft\Windows\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\Users\user\Application Data\Microsoft\Шаблоны\	mod
~$Normal.dotm		2026-10-07 00:11.51	162	-H-A--	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Document Themes\1049\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\SmartArt Graphics\1049\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Bibliography Styles\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\Managed\Word Document Building Blocks\1049\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Document Themes\1049\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Bibliography Styles\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\	add
c:\Users\user\Application Data\Microsoft\Шаблоны\LiveContent\16\User\Word Document Building Blocks\1049\	add
c:\Users\user\Desktop\lab1\src\	mod
~$eyEnergyDropper.doc		2026-10-07 00:11.51	162	-H-A--	add
c:\Users\user\Desktop\tools\SysTracer x64\	mod
SysTracer.cfg		2026-10-07 00:07.07	1,536	---A--	old
		2026-10-07 00:09.16	1,536	---A--	new
SysTracerLog.txt		2023-09-08 13:32.51	343	---A--	old
		2026-10-07 00:09.16	454	---A--	new
c:\Users\user\Desktop\tools\SysTracer x64\data\	mod
snap-1.tmp		2026-10-07 00:09.02	0	---A--	del
snap-2.tmp		2026-10-07 00:13.11	0	---A--	add
snap004.snp		2026-10-07 00:09.16	22,447,240	---A--	add
c:\Users\user\Local Settings\Comms\UnistoreDB\	mod
USS.jtx		2026-10-07 00:07.13	3,145,728	---A--	old
		2026-10-07 00:09.13	3,145,728	---A--	new
c:\Users\user\Local Settings\ConnectedDevicesPlatform\L.user\	mod
ActivitiesCache.db-wal		2026-10-07 00:07.09	45,352	---A--	old
		2026-10-07 00:08.38	531,512	---A--	new
c:\Users\user\Local Settings\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\Local Settings\Microsoft\Office\16.0\	mod
winword.exe_Rules.xml		2026-10-06 02:50.20	7	---A--	old
		2026-10-07 00:11.51	7	---A--	new
c:\Users\user\Local Settings\Microsoft\Vault\UserProfileRoaming\	mod
Latest.dat		2026-10-06 22:17.06	1	---A--	old
		2026-10-07 00:09.36	1	---A--	new
c:\Users\user\Local Settings\Microsoft\Windows\	mod
UsrClass.dat.LOG1		2023-06-11 23:08.35	1,449,984	-HSA--	old
		2023-06-11 23:08.35	524,288	-HSA--	new
UsrClass.dat.LOG2		2023-06-11 23:08.35	1,100,800	-HSA--	old
		2023-06-11 23:08.35	1,142,784	-HSA--	new
c:\Users\user\Local Settings\Microsoft\Windows\History\History.IE5\MSHist012026100720261008\	add
container.dat		2026-10-07 00:11.50	0	-HSA--	add
c:\Users\user\Local Settings\Microsoft\Windows\INetCache\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\Local Settings\Microsoft\Windows\INetCache\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\Local Settings\Microsoft\Windows\Temporary Internet Files\Content.MSO\	mod
286B77D5.wmf		2026-10-07 00:11.57	1,150	---A--	add
38B18769.wmf		2026-10-07 00:11.58	370	---A--	add
3D641624.wmf		2026-10-07 00:11.57	556	---A--	add
46EFDE01.dat		2026-10-07 00:11.51	996	---A--	add
47ED865F.wmf		2026-10-07 00:11.58	370	---A--	add
5228F308.wmf		2026-10-07 00:11.58	538	---A--	add
539F83FC.wmf		2026-10-07 00:11.58	370	---A--	add
5D4372DD.dat		2026-10-07 00:11.51	370	---A--	add
68881DE1.wmf		2026-10-07 00:11.58	884	---A--	add
69E0ACD4.wmf		2026-10-07 00:11.58	1,040	---A--	add
75CA2A6E.wmf		2026-10-07 00:11.58	902	---A--	add
7DE7AE02.wmf		2026-10-07 00:11.58	1,098	---A--	add
81F1C389.dat		2026-10-07 00:11.51	1,156	---A--	add
85E94779.dat		2026-10-07 00:11.51	608	---A--	add
8669653E.wmf		2026-10-07 00:11.58	960	---A--	add
9300F3D2.wmf		2026-10-07 00:11.57	1,132	---A--	add
9749D3B0.wmf		2026-10-07 00:11.57	1,152	---A--	add
9F03FD60.wmf		2026-10-07 00:11.58	1,056	---A--	add
A6411811.dat		2026-10-07 00:11.51	534	---A--	add
A739C5ED.dat		2026-10-07 00:11.51	1,150	---A--	add
A7B40DAB.wmf		2026-10-07 00:11.57	1,156	---A--	add
AF6176A.wmf		2026-10-07 00:11.58	370	---A--	add
AF7350B7.dat		2026-10-07 00:11.51	370	---A--	add
B14C1BCD.wmf		2026-10-07 00:11.58	370	---A--	add
B24AA21B.wmf		2026-10-07 00:11.58	1,054	---A--	add
B4BED827.wmf		2026-10-07 00:11.58	996	---A--	add
BE4110EF.wmf		2026-10-07 00:11.57	534	---A--	add
BF363B83.dat		2026-10-07 00:11.51	1,132	---A--	add
BFF0B77F.dat		2026-10-07 00:11.51	1,152	---A--	add
C4BC2CE5.dat		2026-10-07 00:11.51	1,240	---A--	add
C547DFF1.wmf		2026-10-07 00:11.58	1,240	---A--	add
C5F93EC5.wmf		2026-10-07 00:11.58	1,044	---A--	add
CA3FA5F3.dat		2026-10-07 00:11.51	370	---A--	add
D638B656.wmf		2026-10-07 00:11.58	370	---A--	add
E52D6C63.wmf		2026-10-07 00:11.58	608	---A--	add
E58D553B.dat		2026-10-07 00:11.51	960	---A--	add
F0706547.dat		2026-10-07 00:11.51	556	---A--	add
mso30C0.tmp		2026-10-07 00:11.52	0	---A--	add
c:\Users\user\Local Settings\Microsoft\Windows\Temporary Internet Files\Content.Word\	mod
~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp		2026-10-07 00:11.58	180,224	---A--	add
~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp		2026-10-07 00:11.51	0	---A--	add
~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp		2026-10-07 00:11.51	0	---A--	add
c:\Users\user\Local Settings\Microsoft\Windows\WebCache\	mod
WebCacheV01.dat		2026-10-07 00:06.27	33,030,144	---A--	old
		2026-10-07 00:11.50	33,554,432	---A--	new
c:\Users\user\Local Settings\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\	mod
~DFEBB2D9BE0E3B2FE9.TMP		2026-10-07 00:06.28	0	---A--	old
		2026-10-07 00:06.44	16,384	---A--	new
c:\Users\user\Local Settings\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\	mod
settings.dat.LOG1		2023-06-11 23:09.19	49,152	-HSA--	old
		2023-06-11 23:09.19	74,752	-HSA--	new
c:\Users\user\Local Settings\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Temp\	mod
mat-debug-5912.log		2026-10-07 00:11.26	0	---A--	add
c:\Users\user\Local Settings\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\	mod
HxCommAlwaysOnLog.etl		2026-10-07 00:07.13	65,536	---A--	old
		2026-10-07 00:11.26	65,536	---A--	new
HxCommAlwaysOnLog_Old.etl		2026-10-06 22:14.43	65,536	---A--	old
		2026-10-07 00:07.13	65,536	---A--	new
HxStore.hxd		2026-10-07 00:07.29	4,194,304	---A--	old
		2026-10-07 00:11.41	4,194,304	---A--	new
c:\Users\user\Local Settings\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\	mod
settings.dat		2026-10-07 00:07.39	32,768	---A--	old
		2026-10-07 00:11.51	32,768	---A--	new
c:\Users\user\Local Settings\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\TempState\	mod
d5a8f02229be41efb047bd8f883ba799.db.ses		2026-10-07 00:07.13	53	---A--	old
		2026-10-07 00:11.26	53	---A--	new
c:\Users\user\Local Settings\Temp\	mod
TVUNSS3.exe		2026-10-07 00:11.58	0	---A--	add
{1FF0DA39-0737-4E9A-A689-88B01E7377EE} - OProcSessId.dat		2026-10-07 00:11.50	0	---A--	add
c:\Users\user\Local Settings\Temp\VBE\	add
c:\Users\user\Local Settings\Temp\Word8.0\	add
MSForms.exd		2026-10-07 00:11.57	171,496	---A--	add
c:\Users\user\Recent\	mod
GreyEnergyDropper.doc.lnk		2026-10-07 00:11.50	790	---A--	add
src.lnk		2026-10-05 22:17.33	582	---A--	old
		2026-10-07 00:11.50	542	---A--	new
c:\Users\user\Recent\AutomaticDestinations\	mod
4293e440ad719476.automaticDestinations-ms		2026-10-06 02:50.18	3,584	---A--	old
		2026-10-07 00:11.50	4,608	---A--	new
5f7b5f1e01b83767.automaticDestinations-ms		2026-10-06 02:50.39	17,408	---A--	old
		2026-10-07 00:11.50	18,944	---A--	new
c:\Users\user\Recent\CustomDestinations\	mod
f18460fded109990.customDestinations-ms		2026-10-06 22:14.44	24	---A--	old
		2026-10-07 00:09.24	24	---A--	new
c:\Windows\INF\WmiApRpl\	mod
WmiApRpl.h		2026-10-06 22:18.07	3,444	---A--	old
		2026-10-07 00:10.27	3,444	---A--	new
WmiApRpl.ini		2026-10-06 22:18.59	49,814	---A--	old
		2026-10-07 00:10.32	49,814	---A--	new
c:\Windows\INF\WmiApRpl\0009\	mod
WmiApRpl.ini		2026-10-06 22:18.59	49,814	---A--	old
		2026-10-07 00:10.32	49,814	---A--	new
c:\Windows\INF\WmiApRpl\0019\	mod
WmiApRpl.ini		2026-10-06 22:18.59	49,814	---A--	old
		2026-10-07 00:10.32	49,814	---A--	new
c:\Windows\Prefetch\	mod
BACKGROUNDTASKHOST.EXE-ABF8D6D9.pf		2026-10-06 02:41.29	18,505	---A--	old
		2026-10-07 00:09.34	18,587	---A--	new
RUNTIMEBROKER.EXE-CAA34C76.pf		2026-10-07 00:07.23	8,012	---A--	old
		2026-10-07 00:11.36	8,032	---A--	new
SEARCHFILTERHOST.EXE-10E4267C.pf		2026-10-07 00:07.18	4,052	---A--	old
		2026-10-07 00:12.01	4,558	---A--	new
SEARCHPROTOCOLHOST.EXE-C6CFE2A8.pf		2026-10-07 00:07.18	5,790	---A--	old
		2026-10-07 00:12.01	6,157	---A--	new
SPEECHRUNTIME.EXE-1604C975.pf		2026-10-06 22:14.55	13,938	---A--	old
		2026-10-07 00:09.34	13,700	---A--	new
SPPSVC.EXE-7B160CA5.pf		2026-10-07 00:08.10	10,353	---A--	old
		2026-10-07 00:12.01	10,777	---A--	new
SVCHOST.EXE-47457292.pf		2026-10-07 00:12.07	5,160	---A--	add
SVCHOST.EXE-4F8D34FD.pf		2026-10-06 22:14.55	8,226	---A--	old
		2026-10-07 00:09.34	8,290	---A--	new
SVCHOST.EXE-616AC5AC.pf		2026-10-06 22:16.58	9,889	---A--	old
		2026-10-07 00:09.28	9,954	---A--	new
TASKHOSTW.EXE-1EAF2222.pf		2026-10-07 00:07.26	9,399	---A--	old
		2026-10-07 00:11.26	8,884	---A--	new
WINWORD.EXE-E2A3F0BF.pf		2026-10-06 02:50.28	36,911	---A--	old
		2026-10-07 00:11.58	72,561	---A--	new
WMIADAP.EXE-7D63BB4C.pf		2026-10-06 22:18.04	6,045	---A--	old
		2026-10-07 00:10.34	5,686	---A--	new
c:\Windows\ServiceProfiles\LocalService\	mod
NTUSER.DAT.LOG1		2023-06-11 22:38.50	32,768	-HSA--	old
		2023-06-11 22:38.50	180,224	-HSA--	new
c:\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\	mod
CDPGlobalSettings.cdp		2026-10-07 00:06.26	2,583	---A--	old
		2026-10-07 00:11.53	2,583	---A--	new
c:\Windows\ServiceProfiles\NetworkService\	mod
NTUSER.DAT.LOG1		2023-06-11 22:38.49	81,920	-HSA--	old
		2023-06-11 22:38.49	180,224	-HSA--	new
c:\Windows\System32\	mod
perfc009.dat		2026-10-06 22:18.59	125,368	---A--	old
		2026-10-07 00:10.32	125,368	---A--	new
perfc019.dat		2026-10-06 22:18.59	143,944	---A--	old
		2026-10-07 00:10.32	143,944	---A--	new
perfh009.dat		2026-10-06 22:18.59	666,108	---A--	old
		2026-10-07 00:10.32	666,108	---A--	new
perfh019.dat		2026-10-06 22:18.59	734,030	---A--	old
		2026-10-07 00:10.32	734,030	---A--	new
PerfStringBackup.INI		2026-10-06 22:18.59	1,663,722	---A--	old
		2026-10-07 00:10.32	1,663,722	---A--	new
c:\Windows\System32\config\	mod
DEFAULT.LOG1		2019-03-19 07:37.22	114,688	-HSA--	old
		2019-03-19 07:37.22	356,352	-HSA--	new
SOFTWARE.LOG1		2019-03-19 07:37.22	18,817,024	-HSA--	old
		2019-03-19 07:37.22	15,397,374	-HSA--	new
SOFTWARE.LOG2		2019-03-19 07:37.22	8,257,536	-HSA--	old
		2019-03-19 07:37.22	28,106,752	-HSA--	new
SYSTEM.LOG1		2019-03-19 07:37.22	3,131,392	-HSA--	old
		2019-03-19 07:37.22	11,325,440	-HSA--	new
c:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\	add
c:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\	add
olicenseheartbeat.exe_Rules.xml		2026-10-07 00:09.24	7	---A--	add
c:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\	mod
wpndatabase.db-shm		2026-10-06 22:13.57	32,768	---A--	old
		2026-10-07 00:09.23	32,768	---A--	new
c:\Windows\System32\spp\store\2.0\cache\	mod
cache.dat		2026-10-07 00:08.32	388,904	---A--	old
		2026-10-07 00:09.54	407,208	---A--	new
c:\Windows\System32\Tasks\Microsoft\Windows\PushToInstall\	mod
Registration		2026-10-06 22:16.53	4,280	---A--	old
		2026-10-07 00:09.23	4,280	---A--	new
c:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\	mod
SvcRestartTask		2026-10-07 00:08.32	4,680	---A--	old
		2026-10-07 00:12.24	4,680	---A--	new
c:\Windows\System32\wbem\Performance\	mod
WmiApRpl.h		2026-10-06 22:18.07	3,444	---A--	old
		2026-10-07 00:10.27	3,444	---A--	new
WmiApRpl.ini		2026-10-06 22:18.59	49,814	---A--	old
		2026-10-07 00:10.32	49,814	---A--	new
c:\Windows\System32\wbem\Repository\	mod
INDEX.BTR		2026-10-06 22:18.54	5,046,272	---A--	old
		2026-10-07 00:11.24	5,046,272	---A--	new
MAPPING2.MAP		2026-10-06 02:38.09	89,660	---A--	old
		2026-10-07 00:11.24	89,660	---A--	new
OBJECTS.DATA		2026-10-06 22:18.54	27,049,984	---A--	old
		2026-10-07 00:11.24	27,049,984	---A--	new
c:\Windows\System32\winevt\Logs\	mod
AirSpaceChannel.etl		2026-10-07 00:06.22	4,096	---A--	old
		2026-10-07 00:11.58	1,048,576	---A--	new
Microsoft-Windows-Kernel-EventTracing%4Admin.evtx		2026-10-05 20:40.13	69,632	---A--	old
		2026-10-07 00:12.59	69,632	---A--	new
Microsoft-Windows-Storsvc%4Diagnostic.evtx		2026-10-06 22:21.58	69,632	---A--	old
		2026-10-07 00:09.25	69,632	---A--	new