Malware Analysis Report

2024-10-16 03:01

Sample ID 200416-q7fgprcrb6
Target 1.ps1
SHA256 b692668c4cb71b1029d7a0b062fa5177fff06105da3a35c070466fa3992f7081
Tags
ransomware netwalker
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

b692668c4cb71b1029d7a0b062fa5177fff06105da3a35c070466fa3992f7081

Threat Level: Known bad

The file 1.ps1 was found to be: Known bad.

Malicious Activity Summary

ransomware netwalker

Netwalker

Drops file in Program Files directory

Program crash

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2020-04-16 10:39

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-04-16 10:39

Reported

2020-04-16 10:46

Platform

win7v200410

Max time kernel

227s

Max time network

108s

Command Line

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1.ps1

Signatures

Netwalker

ransomware netwalker

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1660 wrote to memory of 1676 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1660 wrote to memory of 1676 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1660 wrote to memory of 1676 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1676 wrote to memory of 1620 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1676 wrote to memory of 1620 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1676 wrote to memory of 1620 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1660 wrote to memory of 1616 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1660 wrote to memory of 1616 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1660 wrote to memory of 1616 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 1616 wrote to memory of 1732 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1616 wrote to memory of 1732 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1616 wrote to memory of 1732 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 1660 wrote to memory of 1764 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 1660 wrote to memory of 1764 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 1660 wrote to memory of 1764 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 1660 wrote to memory of 1764 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 1764 wrote to memory of 1848 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1848 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1848 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1848 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1848 wrote to memory of 1748 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1848 wrote to memory of 1748 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1848 wrote to memory of 1748 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1848 wrote to memory of 1748 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1764 wrote to memory of 1740 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1740 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1740 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1764 wrote to memory of 1740 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
PID 1740 wrote to memory of 1052 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1740 wrote to memory of 1052 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1740 wrote to memory of 1052 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1740 wrote to memory of 1052 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
PID 1764 wrote to memory of 8060 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\SysWOW64\notepad.exe
PID 1764 wrote to memory of 8060 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\SysWOW64\notepad.exe
PID 1764 wrote to memory of 8060 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\SysWOW64\notepad.exe
PID 1764 wrote to memory of 8060 N/A C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe C:\Windows\SysWOW64\notepad.exe

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ko.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EquityLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME23.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pontianak C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00810_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0157191.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX9.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00578_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00513_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Yakutat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-13 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Seoul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_issue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Nauru C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\IPIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Trek.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiItalic.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0186348.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageScript.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroSign.prc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Paramaribo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\requests\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.identity_3.4.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00935_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\To_Do_List.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178632.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\localedata.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mahe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183174.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MML2OMML.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107146.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UTC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Menominee C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENV98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0318810.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Solstice.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Manaus C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03143I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Bangkok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15136_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15172_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR37F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PS9CRNRH.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Contacts.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Davis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BCSEvents.man C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.SYD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00126_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Luis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR39F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341634.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DVDHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187859.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Phone.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_choosecolor.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR33F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Currie C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01840_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGTEAR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382938.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01241_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0235241.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME33.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WPULQT98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01368_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02386_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hardware Tracker.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Canary C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Fiji C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vincennes C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00097_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188667.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WCOMP98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\LICENSE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BillingStatement.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Default.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106572.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Bucharest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107264.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Casablanca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Xlate_Init.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14595_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341636.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01734_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Maldives C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB9.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BRCHUR98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-uihandler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thunder_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01357_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Comments.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Los_Angeles C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00168_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01253_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\blank.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\cacerts C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107744.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02223U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN092.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152570.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Amman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk_1.0.300.v20140407-1803.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00253_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository_1.1.300.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Riga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\7-Zip\Lang\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Eucla C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guadalcanal C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0214098.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14693_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099163.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00172_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Document Parts\1033\14\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\logging.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MY.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN108.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01358_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00050_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0205462.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\jawt_md.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\Bibliography\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00345_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18180_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageScript.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215210.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\intf\modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Maputo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Noronha C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02270_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZX______.PFB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_SlateBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN090.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01064_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00476_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01607U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02742G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_LightSpirit.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yellowknife C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_blu.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153273.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Maroon.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Shanghai C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NAVBRPH2.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00095_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\LoanAmortization.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SAVE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309920.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18197_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boa_Vista C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME25.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Elegant.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADVTEL.DIC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Chatham C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\bl.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Maceio C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\EUROTOOL.XLAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0313896.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\OneNote\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01562U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18225_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santa_Isabel C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281638.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18242_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21332_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0183290.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00532_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-execution.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\simplexml.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\sound.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR24F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ust-Nera C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterToolTemplates.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187921.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Macau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Davis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SPANISH.LNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\org-openide-filesystems.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_pt_BR.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LTHD98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0186346.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator_1.1.0.v20131217-1203.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02125_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185796.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\EST5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Chisinau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0335112.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03731_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14790_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Dawson_Creek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginMergeLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Urban.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_REVIEW.XSN C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CHECKER.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.concurrent_1.1.0.v20130327-1442.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0174639.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSHY7EN.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00525_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\TOC98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18215_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsColorChart.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Istanbul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239191.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281630.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Hobart C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Abidjan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152882.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BS2BARB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR14F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSPPT.OLB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-options-keymap.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153302.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00820_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jayapura C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15023_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14831_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0304853.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382968.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02285_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Costa_Rica C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\content-types.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Almaty C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PICCAP98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CATWIZ.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\LICENSE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099164.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Stanley C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18224_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309585.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielMergeLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00438_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OLKIRMV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198447.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\US_export_policy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\tesselate.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NAVBAR11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00256_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00423_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME48.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\IPIRMV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Library\Analysis\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215718.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287018.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE01797_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\Analysis\ATPVBAEN.XLAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OEMPRINT.CAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233018.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server-15.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Moscow C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Sakhalin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0234687.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10265_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0172035.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Winamac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0301252.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00211_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Efate C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SLERROR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198494.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099203.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Modern.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01063_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00633_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ADD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\LAUNCH.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Center C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188679.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_initiator.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\create_stream.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Tucuman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387337.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-options.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Jujuy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Thunder_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02169_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00367_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pago_Pago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7FR.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Sao_Paulo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14768_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Porto_Velho C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\ACT3.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7EN.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABON.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Earthy.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tongatapu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENVELOPE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233070.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePageBlank.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE01661_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-output2.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341499.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Eirunepe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241781.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Nauru C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101864.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297757.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\AccessWeb\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\logging.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106222.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153265.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143758.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\SHOT.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\MEDIA\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WHITEBOX.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02750U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00668_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_on.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Urumqi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\VelvetRose.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01236U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\COMBOBOX.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Casual.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BDRTKFUL.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212685.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02120_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLADD.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-io.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00268_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14677_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0174952.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00559_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-threaddump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153398.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\skins\fonts\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\3082\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-remote.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02405_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBARBLL.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00673L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\YST9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02748G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\El_Aaiun C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101863.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01148_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\OMSSMS.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Tallinn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00483_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Mawson C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212953.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jni.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0196374.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285780.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\SPLASH.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0293832.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART15.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00956_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309664.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\Presentation Designs\Maple.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18236_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Phoenix C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00114_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AssemblyInfoInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086428.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143745.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-oql.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00234_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\DumontDUrville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15274_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00555_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Graph.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0298653.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL010.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01213K.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\modules\httprequests.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02443_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\THROAT.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105288.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanPhotoAlbum.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106958.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\RTC.der C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Pushpin.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Azores C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\PST8PDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.JP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\STOPICON.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR23F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPAPERS.INI C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BlackTieResume.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0177257.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\bin\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL001.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\J0115875.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\BOMB.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Start End Dates.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Algiers C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART9.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\RTF_BOLD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0302953.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21328_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01300_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ReviewRouting_Review.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\EMAILMOD.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-outline.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\javafx.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152628.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196142.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01568_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBCALSO.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02369_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.SYX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Sofia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGHEADING.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guayaquil C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME19.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287642.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285822.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\LICENSE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00068_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171685.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198377.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\UpdateUnpublish.xht C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\MST7MDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TextFile.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382954.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232171.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLN.XLS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME41.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONGuide.onepkg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBHED98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Anadyr C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL081.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287417.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0250997.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14539_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\PUBBA\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PULQOT98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01563_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02039_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kolkata C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00170_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL108.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME12.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSTORYVERT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198712.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tripoli C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.TW.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7ES.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\POSTCARD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107350.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR35F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187835.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0386764.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18218_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\sa-jdi.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0222019.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosecolor.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Prague C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignright.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7FR.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING2.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGLOGO.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00006_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\ELPHRG01.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281632.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02094_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02746U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ashgabat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0214934.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\AD98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02743G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\net.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7es.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EssentialMergeLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\CompleteUninstall.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\eula.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Noronha C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TAIL.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107262.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Grand_Turk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106208.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02371_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\COUGH.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ApothecaryMergeLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Country.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02736U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\BTOPENWORLD.COM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0182902.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-13 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21294_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR38F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBHD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrowMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.clusters C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Aqtau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-modules.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0296288.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0301418.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0292020.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR14F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0238333.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0172193.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\form_edit.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN082.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21370_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152558.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03241_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01462_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152594.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Samarkand C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00433_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01130_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0295069.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_TW.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198113.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02740U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\HST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01354_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kosrae C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03453_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382969.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\Words.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN086.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14754_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Rangoon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.0.2.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0251007.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kamchatka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Winnipeg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099149.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00837_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293238.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00390_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0300840.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18252_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\WHOOSH.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00388_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanMergeFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vienna C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Mazatlan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105280.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0304875.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0168644.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105414.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_es.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151073.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\status.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Ndjamena C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21307_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_center.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Troll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR27F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152696.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107468.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ru.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-H C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0158477.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099174.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02293_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EST5EDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0233665.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-applemenu.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105502.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382962.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\DataSet.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SAMPLES\SOLVSAMP.XLS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Executive.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ho_Chi_Minh C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Denver C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Novosibirsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hu.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18234_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB02229_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\jaccess.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107748.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02054_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BRCHUR11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPQUOT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00190_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Ceuta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187647.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GREETING.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR30F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0318804.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\UTC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0400004.PNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PSRCHKEY.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183574.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00018_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FORM.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chatham C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0237225.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107730.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148309.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153095.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL075.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Simferopol C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\time-span-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\QUIKPUBS.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME47.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0156537.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15133_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21324_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL012.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALSO98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185778.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR40F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MARQUEE.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\buttons.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10264_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Graph.exe.manifest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZUSR12.ACCDU C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_received.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152568.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Efate C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00482_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153087.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tunis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00807_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.log C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jvm.hprof.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL087.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santarem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341455.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\HICCUP.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ext.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guatemala C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Helsinki C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0332364.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR42F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ASCIIENG.LNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pyongyang C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME27.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185842.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341738.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0299171.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\TEAROFF.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_spellcheck.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382970.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Concourse.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Process Library.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107300.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL01395_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199609.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bogota C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Wallis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152702.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Catamarca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Auckland C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200279.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ashgabat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Singapore C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME42.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0088542.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MX.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Lima C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh88 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-windows.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00272_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14800_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14538_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10298_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Bermuda C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03379I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Sakhalin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02886_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\flavormap.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\InfoPathOM\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18253_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.properties.src C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7cm_es.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cambridge_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-annotations-common.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Etc\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENVELOPE.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0227558.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0237228.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\sRGB.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CATWIZ11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-loaders.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14829_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Perspective.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099153.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02453_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Grid.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guayaquil C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107288.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Elemental.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Nicosia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198020.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\bin\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\TAG.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107724.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384900.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293236.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Austin.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-options.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387882.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10358_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Paper.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188587.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0217302.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rankin_Inlet C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02218_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Median.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14791_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\XMLSDK5.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.ES.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\HST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CONTACT.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0240175.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01301_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14794_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.jdp_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR10F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105332.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099169.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\WSS\1100.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Barbados C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Tasks.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Horizon.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18202_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01252_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18199_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanResume.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kwajalein C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0212701.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Track Issues.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00246_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyclient.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tr.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239965.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\Access\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0230553.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02793_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\1 Right.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.HK.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives_1.1.100.v20140523-0116.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21309_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18220_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-3 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services_3.4.0.v20140312-2051.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099159.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105348.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Wake C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00394_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jdwpTransport.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fur.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0237336.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL01565_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\validation.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLYER11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jvm.lib C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\README.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME06.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENVHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\THOCR.PSP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN089.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00641_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\LOOKUP.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\CAMERA.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Monaco C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21321_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNote.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\TimeCard.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Belgrade C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_VelvetRose.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18231_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLV.PPT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01474_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.WIH C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Honolulu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00538_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145904.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\send-email-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292286.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00638_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00768_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107154.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107750.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0217698.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18230_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099171.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02261_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0336075.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Events.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Students.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART2.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZLIB.ACCDE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Puerto_Rico C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Belgrade C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0157995.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OWSHLP10.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Tags.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SMIMES.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR10F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105912.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLYERHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Regina C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00017_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18254_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00919_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00299_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BUTTON.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santiago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NAVBARV.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02441_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jvmti.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLNOTE.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\.lastModified C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01421_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239063.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jawt.lib C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0296279.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01253_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\FLASH.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Palau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosecolor.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187815.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\RCLRPT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Vostok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115864.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BREAK.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115863.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185800.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341344.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293828.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImagesMask16x16.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SECURE.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Amman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152606.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_super.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfxrt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN075.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0301076.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MAIN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ENGIDX.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\az.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18232_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02749U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\WidescreenPresentation.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Andorra C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeAUM_rootCert.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387604.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0234001.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\new-trigger-wiz.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-applemenu.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALENDAR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGREPFRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14984_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker_1.1.200.v20131119-0908.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\conticon.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099172.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZMAIN.ACCDE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lindeman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-actions.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15276_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\History.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBORDER.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14583_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00452_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR13F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099193.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\weblink.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SplashScreen.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Users.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200521.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLN.PPT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALNDR98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107514.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00834_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Hardcover.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Client.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Rothera C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Gaza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18184_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Client.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105378.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL110.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN01165_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\stop_collection_data.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBHD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\dumpmeta.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0228959.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153516.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0149627.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Projects.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143753.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prcr.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-core.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00704_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\COPYRIGHT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14515_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\List.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR41F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0202045.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LABELHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Galapagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB2A.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Miquelon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\helpmap.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00177_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03459_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14654_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Brisbane C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apothecary.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Cape_Verde C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0089992.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Mawson C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\ROGERS.COM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153307.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Saipan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ReviewRouting_Init.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188513.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115867.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0205466.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Gambier C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143754.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE06049_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Oriel.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Beirut C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\koreus.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Sydney C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME43.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01478U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02062U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02413_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00057_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0174635.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0234266.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tr.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Civic.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME45.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198372.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanMergeLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Havana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\VideoLAN Website.url C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Fakaofo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-lib-uihandler.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\header.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153091.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01743_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSACC.OLB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Response.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21427_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\LICENSE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Accra C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Atlantic\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novokuznetsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\EXLIRMV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\contbig.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WZCNFLCT.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5EDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\SNET.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382965.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\SwitchUnprotect.wm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_streams.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\DRUMROLL.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\VERSION.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME18.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\PROOF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107134.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107708.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7wre_en.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Palmer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chuuk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SHARING.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Foundry.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00693_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Belize C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\NUMERIC.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME29.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Martinique C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0175428.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18182_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FRENCH.LNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-startup.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\MDIParent.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151063.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0149481.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\REPORT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18255_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0216516.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Sales Pipeline.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\de.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL058.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticattribute.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152708.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\PABR.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ADD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Earthy.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00736_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199805.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH00601G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02748U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15275_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152602.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00932_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0150861.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02262_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Music.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\AD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Composite.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Lagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.VN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Foundry.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\REMINDER.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pitcairn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yekaterinburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00257_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00531L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\ended_review_or_form.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSHY7ES.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15056_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105396.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hovd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yakutsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\POSTCD98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0251925.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\javafx.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Adak C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Curacao C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Checkers.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Guadalcanal C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0213449.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02228_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_pressed.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153518.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02041_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Budapest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\XLCPRTID.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfoInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianMergeFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341554.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Cape_Verde C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dhaka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\sd\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Custom.propdesc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\WHOOSH.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN109.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01242_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tallinn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Glace_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CRT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Dialog.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0318448.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SendMail.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Customer Support.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0250504.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Form.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02233_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX8.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME07.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\APA.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr\profile.jfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115840.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153089.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00238_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Settings.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107152.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0216724.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Denver C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00686_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Issues.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15019_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SUBMIT.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185776.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kaliningrad C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR36F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunec.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105506.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_ko.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\PST8PDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107266.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105272.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\plugins.dat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CHECKBOX.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00808_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21311_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00166_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Casey C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\rss.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-nodes.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00221_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.json C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LABEL98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152876.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\RSSITEM.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\CONVERT\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\ffjcext.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Palau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\dt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148798.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\meta\reader\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107150.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cayenne C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215710.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0233512.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153305.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ro.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00563_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00452_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE05710_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216540.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02053J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00783_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107132.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107342.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dataset.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\QP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Darwin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN020.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18227_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCAL.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDCNCL.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fontconfig.bfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02028_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099177.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\FONTSCHM.INI C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0230558.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00444_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0289430.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195772.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0301052.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\.eclipseproduct C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fr.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Winnipeg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\form_edit.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\TYPE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0172067.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00127_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MENU98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309705.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10267_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR34F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090783.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\COUPLER.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BAN98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Manila C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Galapagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\main.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EquityResume.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Uzhgorod C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Assets.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Warsaw C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE05869_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0158007.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART14.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153299.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0098497.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Belem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Atikokan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Porto_Velho C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Grand_Turk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Scoresbysund C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0195384.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\REC.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240811.profile.gz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mspub.exe.manifest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_OliveGreen.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107512.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Flow.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGDOTS.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195342.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\CHIMES.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\GRIPMASK.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15134_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Catamarca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tbilisi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00640_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_INIT.XSN C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\win32\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\zipfs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Caracas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\DumontDUrville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Uzhgorod C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02450_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01296_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLAPPT.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OneNote\SendtoOneNoteFilter.gpd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGACCBOX.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL090.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\accessibility.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-services.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\DisableUndo.au3 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18193_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02758U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\winamp2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01785_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0234000.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Civic.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CSD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15058_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dili C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18247_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241019.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309567.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382966.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01161_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297229.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\alt-rt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\AD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLYER.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103812.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02227_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Lord_Howe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wallis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR15F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02522_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\form_responses.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST7MDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Nicosia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099151.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FiveRules.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292248.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN027.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143746.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Thimphu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8PDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086420.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105600.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00505_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tarawa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00512_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN110.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0304861.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\UTILITY.ACCDA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\index.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\rt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh88 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\calendars.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\AST4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Broken_Hill C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\LoginForm.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Priority.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\open_original_form.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LTHDHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02749G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\RSWOP.ICM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00735_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00255_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00286_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107544.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02417U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME21.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199465.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02373_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL093.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MSTHED98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\speaker-32.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Hobart C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewFrame.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02166_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART12.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02388_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03012U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01294_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.metadataprovider.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\RES98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02466U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLR.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\Xusage.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\youtube.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00466_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hebron C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LABEL.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15072_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayenne C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vevay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Pangnirtung C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MENU.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143749.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.RSD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MST7MDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0177806.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ho_Chi_Minh C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Magadan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR12F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LETTHEAD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01219_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Black Tie.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_sent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02754U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\main.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGDOTS.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCOUPON.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287019.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Details.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105298.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341475.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\MSOSEC.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL097.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPUNCT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0400001.PNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME03.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01472_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Eucla C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ADRESPEL.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN022.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21315_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0182946.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MP00646_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageStyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME08.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01931J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Genko_1.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.rst C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-actions.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\DOC.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-options.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7MDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099192.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.IN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montevideo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BlackTieLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Troll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Samara C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0278882.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-12 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Document Themes 14\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chihuahua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-text.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Goose_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\create_form.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Prague C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB2B.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB8.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0217262.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ORIG98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103402.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ContemporaryPhotoAlbum.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Khartoum C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\RE00006_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\js\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL092.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\3082\MSO.ACL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR00.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107446.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01304G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02282_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Flow.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18251_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\jmxremote.password.template C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kabul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN010.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\WET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02040U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15301_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02263_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE05665_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Niue C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287024.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382948.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AGMGPUOptIn.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0291984.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107316.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105240.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21495_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\INFOMAIL.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01954_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.XLA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ru.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285782.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tbilisi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\AdjacencyReport.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152704.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199727.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0301480.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PROGRAM.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveNewsletter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Installed_schemas14.xss C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATE.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107718.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExpenseReport.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151047.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME17.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgePackages.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FAX\MedianFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING1.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00305_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\PAB.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Antigua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\alert_obj.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02810J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10290_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Shorthand.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861261279.profile.gz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guam C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\javaws.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Invite or Link.one C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01749_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00183_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105520.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21512_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00058_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0304371.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00199_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OMML2MML.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0211981.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\setup.swf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OUTLFLTR.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PICSTYLES.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00726_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152898.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME22.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Casual.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\management.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDRESN.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03236_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14828_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTBOX.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187825.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\EmptyDatabase.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\ARROW.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_off.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152688.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ENGDIC.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1036\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02757U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0212957.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\io.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ERROR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Juneau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\Documentation.url C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02426_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02296_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.LIC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\snmp.acl.template C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bahia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sa.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\be.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageSlice.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\London C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\psfontj2d.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00390_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21322_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfo.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Library\SOLVER\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Jamaica C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107282.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Name.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\ij C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7jp.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0183168.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02262_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\trusted.libraries C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00005_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\New_York C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15059_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME32.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Shanghai C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200289.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\controllers.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-attach.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multiview.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099197.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fontconfig.properties.src C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+11 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBARBLL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15057_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\ENUtxt.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14529_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_off.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178348.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0234376.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Pontianak C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00222_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00882_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL01041_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABOFF.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Beirut C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR16F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18213_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\amd64\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Maceio C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\DataServices\+Connect to New Data Source.odc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBOXES.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\macroprogress.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0304405.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01126_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\RESUME.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBHOME.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0240157.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pohnpei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe Root Certificate.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21527_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_justify.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN102.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\an.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\dkjson.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107492.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15022_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\STORYBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.KR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Pyongyang C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWS.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pago_Pago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01468_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART1.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02361_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382952.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02280_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SNIPE.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01046J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15034_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FEZIP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\UserControl.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kuala_Lumpur C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107090.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\jfr\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.BR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SAVE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ceuta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\splash.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00833_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN01308_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188519.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\DISTLIST.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-awt.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199307.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105974.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187829.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kiev C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL054.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\eBook.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\resources.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LETTHEAD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00685_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGMASTHD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\sandbox.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216112.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0234657.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\cursors.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yerevan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21548_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14883_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Khandyga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18190_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01746_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Office Word 2003 Look.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Ojinaga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\QUERIES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LINEACT.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151061.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveReport.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OCRHC.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\WARN.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00170_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0305493.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Gibraltar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106816.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielResume.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02437_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\.lastModified C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.jobs_3.6.0.v20140424-0053.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.BusinessData.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\PST8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Beulah C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153047.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART7.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341561.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10300_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00034_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WORDREP.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341559.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01849_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0251301.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-1 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-execution.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_GreenTea.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01680_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152436.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18198_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tegucigalpa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Brunei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00633_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Seyes.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\TOOT.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR27F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\blacklist C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Vilnius C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02404_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Indianapolis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\browse_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR37F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18187_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Class.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtobe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Resolute C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\JoinClear.pptm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLV.XLS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00233_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\amd64\jvm.cfg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\cue.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Perth C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\adobepdf.xdc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Tell_City C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0294989.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Taipei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18226_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSGR3FR.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Blog.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0233992.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107280.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Norfolk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Copenhagen C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WSIDBR98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\dailymotion.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\co.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME02.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Lagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0390072.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14983_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SUBMIT.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18181_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0292982.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099200.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01748_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01268_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02074_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21520_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099195.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151055.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02400_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\access\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jerusalem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Omsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178639.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02750G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Edmonton C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BANNER.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00462_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143743.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Opulent.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianResume.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10266_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Omsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LOGO98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Tirane C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.SG.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIGNHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099181.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_hyperlink.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Hermosillo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunmscapi.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_center.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FS3BOX.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Petersburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01265U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01246_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Cordoba C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15132_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\MMHMM.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCAL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01237_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN096.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\hprof-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107358.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02287_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\APPLAUSE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0149407.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21319_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Moncton C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00916_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293844.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0400003.PNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Xlate_Complete.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200611.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00670_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Bissau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Groove Starter Template.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Premium.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7db.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR23F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\FORMS\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107516.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\WANS.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00052_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft.Office.InfoPath.targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\JSByteCodeWin.bin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ApothecaryNewsletter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382957.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033\Synchronization.rll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Taipei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_same_reviewers.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Lisbon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-annotations-common.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Brisbane C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01356_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Chagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00734_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH00780U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00780L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187819.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PSRCHLTS.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285796.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0293800.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4ADT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Gaza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Traditional.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285410.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\STORYBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Issues.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\button.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Berlin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\help.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BROCHURE.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGREPFRM.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL086.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Services\verisign.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_decreaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-11 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN01164_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03339_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\CollectSignatures_Init.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\PersonalMonthlyBudget.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGAD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PROGRAM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Rothera C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\RELAY.CER C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01575_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\GRIP.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Sydney C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107742.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382942.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-14 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLN.DOC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BIZFORM.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBEMAIL.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285698.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107024.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241077.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02074U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\CT_ROOTS.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01141_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195428.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Thatch.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18208_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\plugin.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Vladivostok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGTOC.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Palmer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\ConvertToRestore.ttc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239955.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\REMOTE.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01858_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignleft.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL020.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunec.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Zurich C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107364.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-util-enumerations.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239975.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Bibliography\BIBFORM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0386267.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02578_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multiview.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cancun C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Antigua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\7-Zip\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\GB.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Iqaluit C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Northwind.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0299611.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\access-bridge-64.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLPERF.INI C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239943.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWSHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00232_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02862_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0313965.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN058.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BZCARD11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00014_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBPAGE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB4.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-compat.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03014_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPQUOT.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\digest.s C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0229385.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Author2XML.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199473.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\blacklist C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382961.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SUBMIT.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME51.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_xml.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00560_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\vlm.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\CALENDAR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR19F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195788.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188511.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE.MANIFEST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0294991.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Swift_Current C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.password.template C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00231_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Author2String.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kolkata C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01330_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\README.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10307_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-14 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\EXITEM.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02958_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vilnius C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15171_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107528.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107722.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\BodyPaneBackground.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02736G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\SettingsInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02567J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Whitehorse C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0282126.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0174315.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187861.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-util-enumerations.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00152_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-api-caching.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.http_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\LASER.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL022.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382939.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02845G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240389.profile.gz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\common.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN065.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0301044.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-2 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099180.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00911_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0252629.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_joined.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10297_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBOXES.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0301432.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Chita C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01298_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382944.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103262.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignright.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145895.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Wordcnvpxy.cnv C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200151.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21518_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090779.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\updater.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART11.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\HAMMER.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02957_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLY98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cuiaba C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090087.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\AccessWeb\CLNTWRAP.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Nairobi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OSPP.VBS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01158_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\Analysis\FUNCRES.XLAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01164_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-loaders.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_hyperlink.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151045.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\AccessWeb\SERVWRAP.ASP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18201_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\VOLTAGE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Indianapolis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21422_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL078.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\MLA.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB5B.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Honolulu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107526.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00728_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0297185.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\server\Xusage.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\javaws.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Pacific\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL082.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00417_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\currency.data C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Monterrey C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00396_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PRRT.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB11.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL095.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSHY7FR.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15073_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099170.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\EXLIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0298897.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SIGN.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\.lastModified C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\vlm_export.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Danmarkshavn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME39.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0279644.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.sfx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\BUZZ.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsVersion1Warning.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Earthy.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01243_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\J0115855.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL107.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02073_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9YDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0305257.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Marquesas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\South_Georgia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0386485.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_bullets.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02451_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Copenhagen C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\CST6CDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\MakeAccessible.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00395_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ko.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107130.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00018_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-2 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Krasnoyarsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jvmticmlr.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PSRCHLEX.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBLINK.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241773.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\HLS.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Monaco C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292272.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187893.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_browse.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\INVITE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107148.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BANNER.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107192.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02446_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18235_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\CONVERT\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107026.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_on.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LISTBOX.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01152_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Rome C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSQRY32.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0400002.PNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BlackTieNewsletter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SAVE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\NL.ROGERS.COM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18248_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCINFO.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActionExceptionHandlers.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielMergeFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196354.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7cm_fr.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\XOCR3.PSP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GREETING.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\BG_ADOBE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-explorer.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285820.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDRESP.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\EnableSync.edrwx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\ReadMe.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Riga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199549.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18250_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tahiti C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\RSPMECH.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02055_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02503U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\powerpnt.exe.manifest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0282932.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145373.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\BORDERS\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02058U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGACCBOX.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02756U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105490.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03205I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00391_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7wre_fr.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Scoresbysund C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BIZCARD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18206_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_TexturedBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN011.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FAX\OriginFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bishkek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102762.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Salta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297759.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01572_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART5.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10255_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199661.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\BREEZE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWS.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\br.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0090070.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Atikokan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099182.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01035U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232795.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ant-javafx.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Month_Calendar.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SettingsInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePage.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00192_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Newsprint.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Vladivostok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Creston C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01157_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Ojinaga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\TALK21.COM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200189.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0187423.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Casablanca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Indian\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Luxembourg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00795_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Adjacency.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215709.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21448_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02091_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Knox C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02752G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ApothecaryResume.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02048_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02067_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\meta-index C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicTSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03451_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\XML2WORD.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01848_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02127_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02009_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861258748.profile.gz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Oslo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBAD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382930.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Class.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PSRCHSRN.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105244.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cuiaba C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00603_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR42F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Thule C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Jamaica C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0297749.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BZCD98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\SystemV\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00011_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03795_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0315580.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00625_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200273.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00910_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Thawte Root Certificate.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN054.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0197979.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\http.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Dublin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Godthab C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239935.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Iqaluit C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NAVBRPH1.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PSSKETSM.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239079.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00159_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\RADAR.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\DEFAULT.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00726_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\AdjacencyResume.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\CET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boise C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santa_Isabel C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\attention.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR41F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\classes.jsa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+12 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\java.security C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGMARQ.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_shared.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPOlive.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099179.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21338_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSWORD.OLB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\LAUNCH.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Baku C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE01191_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\MINUS.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\THANKS.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DigSig.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AppConfigurationInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Resolute C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03257_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kamchatka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01066_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239611.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\vimeo.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zaporozhye C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Noumea C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00191_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232797.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lt.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115865.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0313974.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02268_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Form.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0228823.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00671_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Detroit C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\COUPON.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0157167.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0283209.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Eirunepe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations_2.4.0.v20131119-0908.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\extensions\VLSub.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UserControl.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14792_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsColorChart.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\skin.dtd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\DefaultBlackAndWhite.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00687_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10308_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Petersburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0286068.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00364_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInAcrobat.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME01.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14691_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-filesystems.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AU.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\submission_history.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe AIR\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\ORG97.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107480.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Blanc-Sablon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7EN.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\release C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21295_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ulaanbaatar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101865.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\RESEND.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Samarkand C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0221903.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupiconsmask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qatar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\reader\filename.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\AdjacencyMergeLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_basestyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Madeira C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR29F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY1.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nipigon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santarem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00343_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE01160_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BZCARDHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02253_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02264_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Interface.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\meta-index C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\PACBELL.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239967.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101980.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0237759.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Slipstream.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\SHOVEL.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239941.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh89 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR22F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21503_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106020.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00223_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01235U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\af.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_spellcheck.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02417_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287643.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341653.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\EmptyDatabase.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.THD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kwajalein C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14514_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Tabs.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198226.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\RELEASE-NOTES.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\OOFTMPL.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7ES.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fiji C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Lindeman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Oral C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382947.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASKREQ.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Simple.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Monticello C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\POST98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Irkutsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Asia\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ndjamena C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Easter C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200163.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\GRAY.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB1B.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14516_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0149887.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21413_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianReport.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107138.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18210_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Edmonton C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kuching C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Regina C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287020.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01491_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Antarctica\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+1 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN105.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OSPP.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0222017.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18229_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02755U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\PASSWORD.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01682_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UNT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232393.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\Welcome.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\DataServices\+NewSQLServerConnection.odc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\POSTCD11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00915_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Perspective.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.json C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-V C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSans.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0164153.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Magadan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Beulah C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\orb.idl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Windhoek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-tabcontrol.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PG_INDEX.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\RESUME.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Mahe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh87 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLYER.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\FAX\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-1 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Metro.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241037.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145810.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Melbourne C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGACCBAR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.sig C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jayapura C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\SBCGLOBAL.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02738U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0157177.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Stationery\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hong_Kong C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+2 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15302_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382925.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15273_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN002.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01569_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198021.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\La_Rioja C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02155_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086432.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Phoenix C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Chisinau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME24.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212751.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292278.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\St_Johns C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART8.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00798_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0216858.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jakarta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\msaccess.exe.manifest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106124.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14997_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rainy_River C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18222_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145669.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099199.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02265_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00157_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-text.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EquityMergeFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Broken_Hill C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Perth C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGACCBAR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL096.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Thatch.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PRRTINST.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00350_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03425I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\VIBE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\images\cursors\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Module.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_TexturedBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0299125.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDBAR98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00806_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14996_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\skin.catalog C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sitka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Status.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SEARCH.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\dummy.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Vostok C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02398_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL065.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199755.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14985_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_sv.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02753U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PPTIRMV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Martinique C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\BG_ADOBE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Curacao C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107502.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14793_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105412.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\SuspendGet.odt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185828.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_lg.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198025.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00485_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\CALENDAR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART13.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0186362.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EquityMergeLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02093_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01238_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNote.gpd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099194.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EssentialResume.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.lock C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\PublicFunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0300520.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application-views.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02435_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\LimitGrant.snd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tarawa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01744_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\New_York C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199429.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\cursors.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javaws.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15135_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216874.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00452_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL01040_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\yo.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Khartoum C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Havana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB3A.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_increaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Panama C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Lima C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105232.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00013_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ProjectStatusReport.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\view.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL002.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105390.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Moscow C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152560.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Creston C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN097.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Tijuana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02124_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_browser.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Hermosillo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\vi.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00530_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292270.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0304933.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\meta-index C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wake C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsImageTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215070.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02045_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10263_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Real.mpp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Video-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Maldives C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18214_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kiritimati C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR22F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kosrae C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR25F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition - Customized.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15185_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0195534.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03224I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EquityReport.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BlackTieMergeLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGLINACC.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Chagos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Yellowknife C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL016.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0321179.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Amsterdam C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\builtincontrolsschema.xsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0286034.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105320.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\custom.lua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jce.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00629_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0090386.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsVersion1Warning.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Singapore C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\RTF_BOLD.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cancun C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME46.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0230876.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\Messenger.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00487_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0251871.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Berlin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSTORY.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-3 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\javafx-doclet.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PROG98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198102.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jawt.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\deploy\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\Access\WSS\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nome C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\jamendo.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LTHD11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0182898.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01561_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Library\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mexico_City C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105234.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18203_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00042_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0197983.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00642_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Perspective.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Minsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPUNCT.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00516L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\ReadOutLoud.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Almaty C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Europe\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Macau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_GreenTea.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rio_Branco C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Casual.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\PublicFunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Address.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Minsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hong_Kong C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BS4BOXES.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143750.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+4 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185786.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Godthab C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143744.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01149_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382955.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01244_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Araguaina C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSPUB.TLB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\JFONT.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01154_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00333_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR31F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00389_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148757.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0238983.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\COPYING.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\ResourceInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00330_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00204_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21480_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\EMAIL11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387895.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR17F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382960.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CURRENCY.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\subscription.xsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\XLMACRO.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\Access\Part\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZY______.PFB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\jaccess.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\sd\icecast.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\UCT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.registry_1.1.300.v20130402-1529.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\ACCWIZ\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099176.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281008.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00941_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL102.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLV.DOC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yakutat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0315612.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10254_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\sRGB.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\is.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\GostName.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107500.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\da.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18192_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Kiev C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0290548.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107258.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0229389.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SketchPadTestSchema.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0089945.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Irkutsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-io-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00049_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\CHICAGO.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\QP.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\ISO690Nmerical.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-core-kit.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveResume.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Tripoli C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-compat.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099184.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZDAT12.ACCDU C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\README.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Dublin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\SUCTION.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01875_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_distributed.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR11F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00453_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02263_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guyana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21299_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Aspect.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14830_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.CN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0300862.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0278702.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00217_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0284916.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\SWBELL.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195320.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382836.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME13.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\ui.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-io.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB6.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Los_Angeles C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\jmxremote.access C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\IMAGE.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sao_Paulo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cayman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEWBY.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-heapdump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152878.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\smtp.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Volgograd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CATALOG.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14710_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rainy_River C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\psfont.properties.ja C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Category.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Rangoon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195254.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00231_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02356_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00233_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\IntroducingPowerPoint2010.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Abidjan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00308_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01293_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Contacts.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\AUTHOR.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00531_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102984.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanReport.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Nairobi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02829J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21435_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107712.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341448.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInAcrobat.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia_Banderas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL109.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02464_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_ja.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kabul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGATNGET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\common.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\content-types.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.STD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Budapest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Dawson C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107452.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216570.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Damascus C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0296277.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105388.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Istanbul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNoteNames.gpd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Madrid C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185780.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18244_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME49.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0150150.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\Analysis\PROCDB.XLAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Tasks.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BORDERBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387578.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviewers.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105294.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Kaliningrad C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\cpyr.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lij.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DOTS.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01805_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\New_Salem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384888.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18211_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Matamoros C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\RPLBRF35.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01839_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_decreaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+3 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONENOTEIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Resource.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21331_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\New_Skins.url C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\bin\server\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241043.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01295_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Port_of_Spain C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115843.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0160590.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\J0115856.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.JP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7ES.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGZIPC.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CATALOG.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285360.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309480.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152722.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Country.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jerusalem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR26F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FLYER98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-spi-actions.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-nodes.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02291U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153093.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-11 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\sd\jamendo.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-awt.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185806.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-execution.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hovd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187881.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105338.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10337_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107254.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\tools.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21326_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_mac.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099173.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239973.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00382_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Asuncion C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00523_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099202.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00656_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCOUPON.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Saipan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pitcairn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR18F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0302827.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199036.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02448_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Brussels C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_choosefont.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102594.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Buenos_Aires C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\POLICIES.FDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPICCAP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Qyzylorda C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Athens C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\HEADING.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00608_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Technic.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_it.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Srednekolymsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME31.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Africa\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01751_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-nodes.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152556.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199483.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152430.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\NVBELL.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Choibalsan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01838_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WITHCOMP.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107482.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\PYCC.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Windhoek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309904.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALSO11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152894.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\local_policy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00934_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\CIEXYZ.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_OliveGreen.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR25F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01842_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Faculty.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\DataServices\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00468_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00737_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Syowa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\invalid32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Stockholm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0240189.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01297_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18241_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151067.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105588.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105238.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Guam C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-io-ui.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\INVITE.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\COIN.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107426.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_equalizer.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL011.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105380.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\add_reviewer.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\PublicFunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21303_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01236_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-windows.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Monterrey C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0337280.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00809_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00494_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGATNGET.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIGN.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ba.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME37.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0324704.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086424.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PICTPH.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105504.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Common Files\Services\verisign.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10256_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInTray.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Anchorage C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\US_export_policy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0149118.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21325_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00416_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Chihuahua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7fr.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02267_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\abcpy.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0195812.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson_Creek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\javaws.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200377.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME20.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\release C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.attach_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSGR3EN.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBORDER.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-compat.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thule C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\J0115876.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SUBMIT.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Kerguelen C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\telnet.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASKACC.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\GMT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0196164.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightItalic.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME05.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\AccessWeb\RPT2HTM4.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105496.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\STRBRST.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00636_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099183.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01590_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Adelaide C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBPAGE.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Madrid C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Juan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Tucuman C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR13F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00177_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tl.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_de.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341439.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107450.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187837.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Oslo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\file_obj.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281640.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\AUTHORS.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0186002.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\SPACER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\GMT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SPACER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0179963.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0238927.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02431_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0313970.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Bishkek C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Halifax C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145879.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\accessibility.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+11 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187817.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0214948.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Module.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Sitka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15156_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\NOTE.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\splash.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15155_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSIDEBRV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\IPM.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Cocos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00479_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Toronto C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285808.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14752_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382967.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02368_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0297707.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15020_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fakaofo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\cli.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0186364.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00260_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0235319.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_italic.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr\default.jfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBREF.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Essential.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\El_Salvador C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Angles.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tehran C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGTOC.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uk.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\License.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hi.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASKDEC.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_SlateBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Knox C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107494.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185834.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00694_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02051_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\SNEEZE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185774.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297725.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONENOTE.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115868.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341534.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Algiers C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00542_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDREST.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Horizon.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15168_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodicon.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101867.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02790_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02024_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL044.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Oral C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293240.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_it.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN048.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.lng C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\security\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baghdad C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN103.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00454_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7cm_en.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0240695.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152610.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Msgbox.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Managua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199279.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239997.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Samara C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BROCHURE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0157763.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_CN.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Vancouver C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\GostTitle.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14655_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\PUSH.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107158.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21330_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Volgograd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115844.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_email.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105368.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00110_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\FAXEXT.ECF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14711_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199423.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Makassar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0186360.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187849.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21335_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Manaus C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00760L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0216588.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02276_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0182689.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105336.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Casey C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02465_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285926.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL077.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\acro20.lng C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EssentialReport.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02055_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00915_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\SAMPLES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\7zCon.sfx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0212219.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10299_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\WSS\107.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME16.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Media.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_it.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN095.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME30.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21534_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Apia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfig.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7ge.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Jujuy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL083.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341645.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Chita C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0297551.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\PLUS.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285484.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10289_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR21F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR32F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Danmarkshavn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDREQ.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18249_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\SaveRepair.emz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GIFT98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\New_Salem C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099146.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0222015.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\TURABIAN.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Azores C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Anadyr C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105286.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382926.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\javafx.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Zaporozhye C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BRCH98SP.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL01394_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107290.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187851.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01560_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Apothecary.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232395.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\end_review.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR28F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\EMAIL.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02252_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\descript.ion C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Anchorage C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Brunei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qyzylorda C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE05870_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285750.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14656_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01293_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384895.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Dotted_Line.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Salta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02439_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00683_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01239K.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18233_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10336_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\appletrailers.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185790.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BS53BOXS.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL089.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR16F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_super.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SMIMEE.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\profile.jfc C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kathmandu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099201.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00913_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME55.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153514.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105526.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01905_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cy.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfxrt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL105.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME04.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR20F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02126_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00918_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\bdcmetadataresource.xsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21327_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSCOL11.PPD C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvSOFT.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.annotation_1.2.0.v201401042248.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\INVITE11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\skins\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dubai C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21305_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\ResourceInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Groove.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Tunis C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASKUPD.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Reykjavik C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198022.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nassau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENV11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR12F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Couture.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287415.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\core.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Miquelon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01852_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18221_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18246_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME38.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\CST6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BIZFORM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.LTS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_es.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21481_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Reunion C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR21F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107496.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152694.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\mc.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187847.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00898_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03331_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01843_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Fortaleza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\si.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annots.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Port_Moresby C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\MENU.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORM98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLPERF.H C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115839.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-heapwalker.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\St_Johns C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-modules.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107182.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\local_policy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Fortaleza C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0252349.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\MDIParent.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02066_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGLOGO.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01044_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Seoul C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02265_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Waveform.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Rarotonga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152892.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nl.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103058.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\ADDINS\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+2 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152432.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0182888.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151041.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187895.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office 2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Bougainville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00784_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309598.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099196.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0299587.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0240291.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Kentucky\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00178_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14795_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Distinctive.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0299763.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hebron C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\error_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME35.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Juneau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02413_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21313_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\DefaultID.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18194_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_LightSpirit.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-core-kit.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tijuana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01461_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185798.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105846.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215076.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\pdf.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Rarotonga C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWS98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00788_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21348_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18185_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152600.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216600.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Adak C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuching C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Baghdad C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Vienna C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEB11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10302_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.TTS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Panama C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Tegucigalpa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Teal.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01179J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00046_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR18F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_fr.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-uisupport.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01361_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\NOTICE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00723_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASK.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Christmas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00458_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ERROR.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0291794.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14844_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Noumea C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ust-Nera C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107188.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\EssentialLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00298_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL027.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\WET C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN081.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tokyo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\extensions\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Cocos C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\South_Georgia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\MENUS.JS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\validation.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuala_Lumpur C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB1A.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02390_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Canary C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01750_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Darwin C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287641.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105266.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsMacroTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099178.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\EXPLODE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN001.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00218_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02617_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341654.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02288_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02424_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveMergeLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-dialogs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB7.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382927.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01745_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FAX\UrbanFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287645.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Campo_Grande C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGAD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Apia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Mauritius C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apex.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME53.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGZIP.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\zipfs.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18228_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Marengo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME52.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\management.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0300912.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21318_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14692_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet.jsp_2.2.0.v201112011158.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jmc.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02384_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00095_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZTOOL.ACCDE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Maputo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.FR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198016.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105638.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00668_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03668_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Urumqi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199283.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21310_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18243_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0185604.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Montreal C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\classfile_constants.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293570.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00200_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fy.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BORDERBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02039U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\LINEAR_RGB.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Inuvik C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Chuuk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00411_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233312.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\resources.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfontj2d.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285462.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18219_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152884.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Enderbury C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086478.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\grvschema.xsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.OPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Generic.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107308.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287644.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\info.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\trash.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jsse.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107734.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01777_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Goose_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01866_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086384.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090777.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FAX\EquityFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\management\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Managua C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME36.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196364.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterNotificationDescriptors.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\VERSION.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIGN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTFORM.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR19F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0217872.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.TH.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN026.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belize C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Campo_Grande C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00712_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21340_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfigInternal.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Kerguelen C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD10219_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BIZCARD.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\java.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Center C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00555_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OCRVC.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Louisville C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\th.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178932.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\SY______.PFB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Training.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\TITLE.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-options.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099205.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AR.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107458.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\THIRDPARTYLICENSEREADME.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Status Report.fdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196358.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01740_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10301_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Madeira C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\ODBC.SAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port_of_Spain C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\CAN.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sv.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152414.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sa.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yekaterinburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\meta-index C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Aqtobe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01701_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00938_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21334_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285792.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Paramaribo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PS10TARG.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\charsets.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Syowa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382950.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+1 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-loaders.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin_2.0.100.v20131209-2144.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0280468.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\CodeFile.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Vancouver C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384885.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kiritimati C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\QuizShow.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Module.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107314.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00478_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Colombo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE01172_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vevay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01123_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GIFT.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Elemental.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Easter C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALENDAR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART6.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Reykjavik C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javafx.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-explorer.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.aup C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14756_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\El_Aaiun C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0183328.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382931.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME34.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115835.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188669.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Text.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\EST5EDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\README.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Formal.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107302.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginMergeFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195260.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212299.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00197_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0212661.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\LINEAR_RGB.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dili C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GREET11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hr.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-print.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0287005.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.PH.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\README.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Reunion C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02794_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PAPERS.INI C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01770_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OLKIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Marengo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Sofia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00345_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Karachi C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kathmandu C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241041.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABMASK.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di.extensions_0.12.0.v20140417-2033.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21433_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01069_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18207_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dialog.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Araguaina C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CharSetTable.chr C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\ALARM.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SegoeChess.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-9 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Glace_Bay C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MP00021_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN044.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Apex.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341447.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14753_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0292152.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Midway C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Merida C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\RegisterUnregister.mpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\AdobeID.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0301050.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03464_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Johannesburg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105398.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15021_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00914_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\SignedManagedObjects.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR11F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105410.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\batch_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\LASER.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Asuncion C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\RADIO.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297727.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02092_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0324694.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02028K.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0295241.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341557.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ACCSBAR.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18245_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\images\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239951.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153313.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02791_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0332268.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mauritius C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts2.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADVZIP.DIC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0285444.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0215086.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTAREA.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341551.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\AIR98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\El_Salvador C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03041I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\2 Top.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\ext\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGLINACC.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vincennes C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382958.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0198234.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187839.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18189_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\cmm\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME10.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239953.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14755_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_TW.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187863.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185818.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01563_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Genko_2.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.security C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199475.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.c C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tokyo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\La_Paz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\HEADINGBB.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18237_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02950_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18209_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107328.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090149.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Installed_resources14.xss C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\README.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Metro.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tirane C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_disable.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00352_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Foundry.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\classlist C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\CIEXYZ.pf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03513_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCallbacks.h C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143748.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Whitehorse C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.DE.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0213243.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\reflow.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105250.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15170_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tehran C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02389_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PSSKETLG.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\default.vlt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\server\classes.jsa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\CLICK.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Montevideo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18204_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\PDFSigQFormalRep.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02470U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Caracas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200183.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0282928.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\UrbanLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ja_JP.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\SOLVER\SOLVER.XLAM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME40.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\artifacts.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02022_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guyana C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00194_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-search.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18217_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152590.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rio_Branco C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02897J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Clarity.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dhaka C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Midway C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\classlist C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\meta\art\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boise C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178523.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableUpArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\La_Rioja C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\AMERITECH.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Verve.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Couture.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.APL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PSRCHPHN.DAT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ja.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-visual.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02412K.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18196_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novosibirsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00494_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200467.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-awt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105246.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft.NET\RedistList\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LTHD98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL106.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PSRETRO.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15169_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\FAX\OrielFax.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10335_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Monrovia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145707.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15277_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME44.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0234131.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\WORDIRMV.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Bissau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR15F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183172.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pmd.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\MyriadCAD.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Niue C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WORDREP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152608.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14769_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\CollectSignatures_Sign.xsn C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0211949.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+8 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSCOL11.INF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh87 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\GIGGLE.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL103.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Luxembourg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01292_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02278_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02759J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382959.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\2d.x3d C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\WITHCOMP.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ClassicPhotoAlbum.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB5A.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGPICCAP.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00681_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01742_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02431_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105306.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\vocaroo.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR40F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15035_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\01_googleimage.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePage.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ADVCMP.DIC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN107.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0158071.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\excel.exe.manifest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\YEAR.XSL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152690.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02439_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jsse.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01240_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\CASHREG.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Christmas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tashkent C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BloodPressureTracker.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Mexico_City C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-dialogs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\IA32.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18238_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\WORDIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105276.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielReport.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\DELETE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Marquesas C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0222021.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Moncton C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWS11.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Pitchbook.potx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0387591.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297269.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105384.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\warning.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\XML Files\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152698.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\DataType\Payment Type.accft C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\OMSMMS.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281243.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02746G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\dialogs\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\PST8PDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01245_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\MSBuild\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\MST7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105376.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00402_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01747_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\tzmappings C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSO0127.ACL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\LABEL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18239_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\playlist\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03380I.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01247U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Macquarie C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MEDIA\WIND.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL111.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE05930_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0281904.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSOUTL.OLB C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105386.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Bibliography\Style\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-windows.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\REPTWIZ.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-io.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0314068.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18257_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\dnsns.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212601.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216153.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGMAIN.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105230.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jvm.hprof.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18205_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0238959.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107490.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15272_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Stockholm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01627_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfont.properties.ja C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+6 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR38F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\1 Top.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Bucharest C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\POSTCARD.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0149018.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02444_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01473_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00917_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14757_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN111.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.bidi_0.10.0.v20130327-1442.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\AdjacencyLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\config.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Helsinki C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239057.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0309902.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02025_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PDDom.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\ZoneInfoMappings C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\La_Paz C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183198.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105710.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02423_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Manila C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ACCTBOX.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00289_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02740G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14845_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02069J.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00014_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178459.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18216_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\OLTASK.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Andorra C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0227419.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\GIFT.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net_1.2.200.v20120807-0927.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02398U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0157831.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.policy C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\AST4ADT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14528_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02407_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Memo.jtp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB3B.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-actions.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-execution.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL104.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105282.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00486_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02269_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\CST6CDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0252669.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\dnsns.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01566_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE06450_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Srednekolymsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignleft.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME26.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Simferopol C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Detroit C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Origin.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Spelling.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\platform.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL026.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\HEADINGBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search5.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15060_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00943_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15061_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6CDT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152626.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mset7en.kic C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02270_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\HST10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Puerto_Rico C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099175.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21390_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MP00132_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099204.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yakutsk C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PS2SWOOS.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02742U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\snmp.acl.template C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103850.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PPKLite.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGMARQ.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Manuscript.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME50.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL048.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178460.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nassau C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01470_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ENGLISH.LNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\rt.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\BTINTERNET.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_olv.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00720_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+7 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7FR.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\PNCTUATE.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PSWAVY.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\EScript.api C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\setup.ini C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\status.json C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\London C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105292.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00828_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00330_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ApothecaryLetter.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03470_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_pressed.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099198.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10268_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\SplashScreen.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00351_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196110.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18200_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dubai C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME09.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01299_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02071U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0386270.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00998_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management-agent.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Matamoros C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\console_view.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychartplugin_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR26F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\mobile.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\liveleak.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00732_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSGR3ES.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15173_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME14.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdate.cer C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14594_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pohnpei C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNote-PipelineConfig.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Recife C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Amsterdam C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18191_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\net.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Indiana\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\fonts\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14832_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Median.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.ID.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Menominee C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00118_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\EMAIL.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00454_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\soundcloud.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME28.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginResume.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02009_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107456.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\HORN.WAV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152890.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\intf\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_OFF.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ct.sym C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00132_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293234.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Melbourne C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\REPLTMPL.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\WINWORD.HXS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14801_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Qatar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341328.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29B.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Newsprint.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Australia\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Brussels C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-core-kit.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341742.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_pt_BR.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ir.idl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Chicago C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_underline.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384862.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR17F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00116_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_de.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\BUTTON.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE04050_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14530_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.UK.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\ENV98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_increaseindent.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\STSLIST.CHM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yerevan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SECREC.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB10.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107658.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bogota C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dushanbe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianMergeLetter.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\XmlFile.zip C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sk.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00208_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01221K.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21297_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATETIME.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00703L.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153508.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Malta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH03011U.BMP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right_over.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200383.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0386120.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Cairo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Library\Analysis\ANALYS32.XLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\PRODIGY.NET.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199303.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\HST10 C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Recife C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01255G.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginReport.Dotx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\javafx-mx.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151581.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21308_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\2 Right.accdt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\core_visualvm.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Swift_Current C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInTray.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195248.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00373_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03466_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_justify.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152622.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY01006_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107728.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\AWARDHM.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME15.CSS C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR24F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Equity.thmx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\VideoLAN\VLC\hrtfs\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Paris C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00212_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_on.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0136865.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lord_Howe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\bdcmetadata.xsd C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages.properties C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageStyle.css C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART4.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Blanc-Sablon C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0400005.PNG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0199469.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107746.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0232803.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287408.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PPTIRM.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143752.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21323_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core_2.3.0.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.xsl C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Faroe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR20F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18223_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Notebook03.onepkg C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CA.XML C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Templates\1033\SalesReport.xltx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.DPV C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Makassar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Toronto C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0196400.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Adelaide C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00241_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\distribute_form.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_all.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Inuvik C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00792_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0205582.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Casual.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LINE.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21336_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\luac.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01239_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\sentinel C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00391_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR39F.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382963.JPG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Auckland C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Barbados C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\POST.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Updater6\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7wre_es.dub C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Metlakatla C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\LATIN1.SHP C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Colombo C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0216612.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14513_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21320_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\POSTIT.CFG C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Damascus C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0196060.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\NEWS.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\trusted.libraries C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\modules\host.luac C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18212_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Athens C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Malta C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0240719.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIGN98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-core.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7EN.LEX C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00489_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Bibliography\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsVersion1Warning.htm C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\RESP98.POC C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\7B3FE5-Readme.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mk.txt C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107344.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BORDERS\MSART10.BDR C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\DELETE.GIF C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Choibalsan C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe N/A

Processes

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1.ps1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\3poimcy0\3poimcy0.cmdline"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES9665.tmp" "c:\Users\Admin\AppData\Local\Temp\3poimcy0\CSC106ED3C496F24ED89673B010989CBD2.TMP"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\rv4tfw4m\rv4tfw4m.cmdline"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES975E.tmp" "c:\Users\Admin\AppData\Local\Temp\rv4tfw4m\CSC14D4317888C74D7EA5F96B15AEFF55AF.TMP"

C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe

"C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe" -NonInteractive -NoProfile -file C:\Users\Admin\AppData\Local\Temp\1.ps1

C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\z54ickbr\z54ickbr.cmdline"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESBF67.tmp" "c:\Users\Admin\AppData\Local\Temp\z54ickbr\CSC199D470A5CD34F61AED790E736A93F47.TMP"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\2kll20yb\2kll20yb.cmdline"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESC042.tmp" "c:\Users\Admin\AppData\Local\Temp\2kll20yb\CSC415934B7F79646BBA8969BC97F8B949D.TMP"

C:\Windows\SysWOW64\notepad.exe

C:\Windows\system32\notepad.exe "C:\Users\Admin\Desktop\7B3FE5-Readme.txt"

Network

Country Destination Domain Proto
N/A 239.255.255.250:1900 udp
N/A 239.255.255.250:1900 udp
N/A 224.0.0.22 igmp

Files

\??\c:\Users\Admin\AppData\Local\Temp\3poimcy0\3poimcy0.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\3poimcy0\3poimcy0.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\3poimcy0\CSC106ED3C496F24ED89673B010989CBD2.TMP

C:\Users\Admin\AppData\Local\Temp\RES9665.tmp

C:\Users\Admin\AppData\Local\Temp\3poimcy0\3poimcy0.dll

\??\c:\Users\Admin\AppData\Local\Temp\rv4tfw4m\rv4tfw4m.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\rv4tfw4m\rv4tfw4m.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\rv4tfw4m\CSC14D4317888C74D7EA5F96B15AEFF55AF.TMP

C:\Users\Admin\AppData\Local\Temp\RES975E.tmp

C:\Users\Admin\AppData\Local\Temp\rv4tfw4m\rv4tfw4m.dll

\??\c:\Users\Admin\AppData\Local\Temp\z54ickbr\z54ickbr.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\z54ickbr\z54ickbr.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\z54ickbr\CSC199D470A5CD34F61AED790E736A93F47.TMP

C:\Users\Admin\AppData\Local\Temp\RESBF67.tmp

C:\Users\Admin\AppData\Local\Temp\z54ickbr\z54ickbr.dll

\??\c:\Users\Admin\AppData\Local\Temp\2kll20yb\2kll20yb.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\2kll20yb\2kll20yb.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\2kll20yb\CSC415934B7F79646BBA8969BC97F8B949D.TMP

C:\Users\Admin\AppData\Local\Temp\RESC042.tmp

C:\Users\Admin\AppData\Local\Temp\2kll20yb\2kll20yb.dll

C:\Users\Admin\Desktop\7B3FE5-Readme.txt

Analysis: behavioral2

Detonation Overview

Submitted

2020-04-16 10:39

Reported

2020-04-16 10:46

Platform

win10v200410

Max time kernel

223s

Max time network

156s

Command Line

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1.ps1

Signatures

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\WerFault.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\WerFault.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WerFault.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4036 wrote to memory of 3936 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 4036 wrote to memory of 3936 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 3936 wrote to memory of 2700 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 3936 wrote to memory of 2700 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 4036 wrote to memory of 2100 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 4036 wrote to memory of 2100 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
PID 2100 wrote to memory of 3824 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 2100 wrote to memory of 3824 N/A C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
PID 4036 wrote to memory of 3332 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 4036 wrote to memory of 3332 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe
PID 4036 wrote to memory of 3332 N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe

Processes

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1.ps1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\00ezayrv\00ezayrv.cmdline"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES86C4.tmp" "c:\Users\Admin\AppData\Local\Temp\00ezayrv\CSCD71D6A3221DB4C8B985413688D56319.TMP"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\5mbdv1t3\5mbdv1t3.cmdline"

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES879E.tmp" "c:\Users\Admin\AppData\Local\Temp\5mbdv1t3\CSC720E609714E34FA48DFE6A385839CA2D.TMP"

C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe

"C:\Windows\syswow64\windowspowershell\v1.0\powershell.exe" -NonInteractive -NoProfile -file C:\Users\Admin\AppData\Local\Temp\1.ps1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 708

Network

Country Destination Domain Proto
N/A 8.8.8.8:53 udp
N/A 13.107.4.52:80 www.msftconnecttest.com tcp
N/A 8.8.8.8:53 udp
N/A 52.109.124.19:443 nexusrules.officeapps.live.com tcp
N/A 239.255.255.250:1900 udp
N/A 239.255.255.250:1900 udp
N/A 127.0.0.1:47001 tcp
N/A 10.10.0.255:137 udp

Files

\??\c:\Users\Admin\AppData\Local\Temp\00ezayrv\00ezayrv.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\00ezayrv\00ezayrv.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\00ezayrv\CSCD71D6A3221DB4C8B985413688D56319.TMP

C:\Users\Admin\AppData\Local\Temp\RES86C4.tmp

C:\Users\Admin\AppData\Local\Temp\00ezayrv\00ezayrv.dll

\??\c:\Users\Admin\AppData\Local\Temp\5mbdv1t3\5mbdv1t3.cmdline

\??\c:\Users\Admin\AppData\Local\Temp\5mbdv1t3\5mbdv1t3.0.cs

\??\c:\Users\Admin\AppData\Local\Temp\5mbdv1t3\CSC720E609714E34FA48DFE6A385839CA2D.TMP

C:\Users\Admin\AppData\Local\Temp\RES879E.tmp

C:\Users\Admin\AppData\Local\Temp\5mbdv1t3\5mbdv1t3.dll

memory/3544-10-0x0000000004CD0000-0x0000000004CD1000-memory.dmp

memory/3544-11-0x0000000005400000-0x0000000005401000-memory.dmp