00000001 0.00000000 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 166 bytes, error 0 00000002 0.00010459 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\EndpointSecurityPlatform_Errors.log 00000003 0.00160057 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 138 bytes, error 0 00000004 0.00178521 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\Firewall_Activity.log 00000005 0.00879161 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 166 bytes, error 0 00000006 0.00894415 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\EndpointSecurityPlatform_Errors.log 00000007 0.00995984 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 138 bytes, error 0 00000008 0.01005046 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\Firewall_Activity.log 00000009 0.06107947 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 114 bytes, error 0 00000010 0.06125504 [12564] [16836] dopus: Change modified on C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-23DB6E8D.pf 00000011 0.06371272 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 114 bytes, error 0 00000012 0.06379239 [12564] [16836] dopus: Change modified on C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-23DB6E8D.pf 00000013 0.19048986 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 110 bytes, error 0 00000014 0.19061936 [12564] [16836] dopus: Change modified on C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-DDB228B1.pf 00000015 0.19151990 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 110 bytes, error 0 00000016 0.19162184 [12564] [16836] dopus: Change modified on C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-DDB228B1.pf 00000017 0.71669799 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000018 0.71680862 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000019 0.80240029 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000020 0.80253017 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000021 0.86184371 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4831) tid(1790) 80070032 The request is not supported. 00000022 0.87090790 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000023 0.87102801 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000024 1.20100594 [16372] ***L_FreeThreadData 00000025 1.20102859 [16372] ***L_AllocThreadData 00000026 1.20109570 [16372] ***InitThreadData 00000027 1.20329630 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000028 1.20335591 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000029 1.29926801 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 102 bytes, error 0 00000030 1.29934776 [12564] [16836] dopus: Change modified on C:\Windows\System32\wbem\Repository\OBJECTS.DATA 00000031 1.30031550 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000032 1.30036151 [12564] [16836] dopus: Change modified on C:\Windows\System32\wbem\Repository\INDEX.BTR 00000033 1.30114841 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 102 bytes, error 0 00000034 1.30124664 [12564] [16836] dopus: Change modified on C:\Windows\System32\wbem\Repository\MAPPING3.MAP 00000035 1.30127978 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 102 bytes, error 0 00000036 1.30135798 [12564] [16836] dopus: Change modified on C:\Windows\System32\wbem\Repository\MAPPING3.MAP 00000037 2.01807141 [13144] avcore\npsm\localprovider\baseprovider\lib\baseprovider.cpp(604)\NPSMDesktopProvider.dll!00007FF8DF5539A4: (caller: 00007FF8DF554113) ReturnHr(119) tid(108c) 80070490 Element not found. 00000038 2.60505629 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 144 bytes, error 0 00000039 2.60515070 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\FirewallEventMonitor.log 00000040 2.86307836 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4832) tid(1790) 80070032 The request is not supported. 00000041 2.94810796 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 170 bytes, error 0 00000042 2.94820595 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Endpoint Security\Logs\AdaptiveThreatProtection_Activity.log 00000043 3.03338885 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000044 3.03349710 [12564] [16836] dopus: Change modified on C:\ProgramData\McAfee\Data_Exchange_Layer\dxl_service.log 00000045 3.19914317 [20252] onecoreuap\inetcore\urlmon\zones\zoneidentifier.cxx(359)\urlmon.dll!727AFCD0: (caller: 727AF9E8) ReturnHr(1) tid(5cc) 80070002 The system cannot find the file specified. 00000046 3.59208202 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 116 bytes, error 0 00000047 3.59219360 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\clamav\0.100.0.59\clamav.log 00000048 3.66449571 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 84 bytes, error 0 00000049 3.66465902 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\cache.db-wal 00000050 3.86836076 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000051 3.86847138 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000052 3.86950636 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000053 3.86961198 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000054 3.87071800 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000055 3.87080717 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000056 3.87230659 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000057 3.87240839 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000058 3.88160110 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000059 3.88175535 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000060 3.88192582 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000061 3.88203287 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000062 3.98285770 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000063 3.98296309 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000064 4.01301479 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000065 4.01312113 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\LOGS\iMobilityService.log 00000066 4.18886232 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000067 4.18889332 [12564] [16836] dopus: Change added on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000068 4.20022106 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000069 4.20042086 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000070 4.20144749 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 124 bytes, error 0 00000071 4.20164728 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db 00000072 4.20457268 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000073 4.20477819 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924 00000074 4.20596218 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000075 4.20612144 [12564] [16836] dopus: Change removed on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000076 4.32248497 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000077 4.32305098 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp 00000078 4.32317781 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000079 4.32327080 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000080 4.32419395 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000081 4.32423878 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp 00000082 4.32437277 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000083 4.32447004 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000084 4.32540178 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000085 4.32586622 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp.dmp 00000086 4.32728910 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000087 4.32738638 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000088 4.32763529 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000089 4.32778025 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp.dmp 00000090 4.86416101 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4833) tid(1790) 80070032 The request is not supported. 00000091 5.16167307 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000092 5.16176558 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924 00000093 5.75032806 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000094 5.75079489 [12564] [16836] dopus: Change added on C:\Program Files\Cisco\AMP\tmp\2CF057.tmpscan 00000095 5.76360130 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000096 5.76368475 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp\2CF057.tmpscan 00000097 5.76421022 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000098 5.76434183 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp.dmp 00000099 5.76439857 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 186 bytes, error 0 00000100 5.76445389 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp.dmp 00000101 5.76450014 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp 00000102 5.76547050 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000103 5.76558018 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000104 5.76673126 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000105 5.76682091 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000106 5.76814890 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000107 5.76819515 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000108 5.76974201 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000109 5.76985407 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000110 5.77098083 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000111 5.77108955 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000112 5.77223778 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000113 5.77229023 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000114 5.77350664 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000115 5.77360678 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000116 5.77496672 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000117 5.77507114 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000118 5.77618504 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000119 5.77629757 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000120 5.77702570 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000121 5.77705717 [12564] [16836] dopus: Change removed on C:\Program Files\Cisco\AMP\tmp\2CF057.tmpscan 00000122 5.77739477 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000123 5.77745819 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000124 5.77859735 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000125 5.77866650 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000126 5.77971268 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 94 bytes, error 0 00000127 5.77979994 [12564] [16836] dopus: Change modified on C:\ProgramData\Synaptics\ValidityService.log 00000128 5.96600103 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000129 5.96647835 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp 00000130 5.96664572 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000131 5.96674395 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000132 5.96743107 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000133 5.96752739 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp 00000134 5.96772575 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000135 5.96875811 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000136 5.97036171 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000137 5.97077084 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000138 5.97172546 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000139 5.99510956 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000140 5.99645281 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000141 5.99665260 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000142 5.99667549 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000143 5.99694633 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 66 bytes, error 0 00000144 5.99989748 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000145 6.00033617 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000146 6.00098610 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000147 6.00182772 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000148 6.00207949 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000149 6.00278425 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000150 6.00422859 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000151 6.05350304 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000152 6.05551004 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000153 6.05567122 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000154 6.05573511 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000155 6.05609274 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 66 bytes, error 0 00000156 6.05896187 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000157 6.05957985 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000158 6.06002569 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000159 6.06044531 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 112 bytes, error 0 00000160 6.06071043 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000161 6.06171989 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000162 6.06281233 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000163 6.06501102 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000164 6.06992579 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000165 6.07043409 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000166 6.07092476 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000167 6.86559105 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4834) tid(1790) 80070032 The request is not supported. 00000168 6.92275906 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000169 6.92315102 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000170 6.92320108 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000171 6.92324352 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000172 6.92328548 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000173 6.92367840 [12564] [16836] dopus: Change added on C:\Program Files\Cisco\AMP\tmp\D20157.tmpscan 00000174 6.92372131 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp\D20157.tmpscan 00000175 6.92376900 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000176 6.92380810 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000177 6.92384911 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp 00000178 6.92388821 [12564] [16836] dopus: Change removed on C:\Program Files\Cisco\AMP\tmp\D20157.tmpscan 00000179 6.92426348 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp 00000180 6.92430639 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000181 6.92435026 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp 00000182 6.92438841 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000183 6.92475605 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp.csv 00000184 6.92477942 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000185 6.92511702 [12564] [16836] dopus: Change added on C:\Program Files\Cisco\AMP\tmp\950157.tmpscan 00000186 6.92515707 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp\950157.tmpscan 00000187 6.92520094 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp.csv 00000188 6.92527628 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp.csv 00000189 6.92532587 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp 00000190 6.92569923 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EAA.tmp 00000191 6.92578125 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000192 6.92582369 [12564] [16836] dopus: Change removed on C:\Program Files\Cisco\AMP\tmp\950157.tmpscan 00000193 6.92586994 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EAA.tmp 00000194 6.92591143 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000195 6.92626762 [12564] [16836] dopus: Change added on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EAA.tmp.txt 00000196 6.92632914 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000197 6.92636347 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EAA.tmp.txt 00000198 6.92638922 [12564] [16836] dopus: Change removed on C:\Users\a91rqzz\AppData\Local\CrashDumps\SmartAudio3.exe.20128.dmp 00000199 6.92642260 [12564] [16836] dopus: Change modified on C:\Users\a91rqzz\AppData\Local\CrashDumps 00000200 6.92645788 [12564] [16836] dopus: Change added on C:\Users\a91rqzz\AppData\Local\CrashDumps\SmartAudio3.exe.18744.dmp 00000201 7.11409712 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 196 bytes, error 0 00000202 7.11417294 [12564] [16836] dopus: Change ren_old on C:\Users\a91rqzz\Documents\_Word Files\HCP 00000203 7.11420918 [12564] [16836] dopus: Change ren_new on C:\Users\a91rqzz\Documents\_Word Files\HCP change 00000204 7.12522221 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 82 bytes, error 0 00000205 7.12532663 [12564] [16836] dopus: Change modified on C:\Users\a91rqzz\Documents\_Word Files 00000206 7.15275240 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 66 bytes, error 0 00000207 7.15279913 [12564] [16836] dopus: Change modified on C:\Program Files\Cisco\AMP\tmp 00000208 7.15753555 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000209 7.15759754 [12564] [16836] dopus: Change modified on C:\Users\a91rqzz\AppData\Local\CrashDumps 00000210 7.37918043 [12564] [17952] dopus: ShellChange: 0000025DE20C8630, 3 00000211 7.37921238 [12564] [17952] dopus: ShellChange: dwEvent = 20000 00000212 7.91882467 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000213 7.91890478 [12564] [16836] dopus: Change modified on C:\Users\a91rqzz\AppData\Local\CrashDumps\SmartAudio3.exe.18744.dmp 00000214 7.92006016 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000215 7.92013073 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6701.tmp.dmp 00000216 7.92033863 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000217 7.92041636 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000218 7.92125559 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 160 bytes, error 0 00000219 7.92135000 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6D7A.tmp.WERInternalMetadata.xml 00000220 7.92158365 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000221 7.92167282 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000222 7.92288256 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000223 7.92299128 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6E6A.tmp.csv 00000224 7.92331696 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000225 7.92340994 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000226 7.92451382 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 120 bytes, error 0 00000227 7.92461491 [12564] [16836] dopus: Change removed on C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EAA.tmp.txt 00000228 8.86701202 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4835) tid(1790) 80070032 The request is not supported. 00000229 9.15145588 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 88 bytes, error 0 00000230 9.15155411 [12564] [16836] dopus: Change modified on C:\ProgramData\Microsoft\Windows\WER\Temp 00000231 10.23085785 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000232 10.23088455 [12564] [16836] dopus: Change added on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000233 10.24483109 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000234 10.24496174 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000235 10.24588203 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 124 bytes, error 0 00000236 10.24597263 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db 00000237 10.24743176 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000238 10.24753952 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924 00000239 10.24834824 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 140 bytes, error 0 00000240 10.24844646 [12564] [16836] dopus: Change removed on C:\ProgramData\NGC\Open Mobile\Profiles\30924\MobilityDB.db-journal 00000241 10.86824322 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4836) tid(1790) 80070032 The request is not supported. 00000242 11.15848446 [12564] [17952] dopus: Notify 0000025DDEB6D850 Returned 96 bytes, error 0 00000243 11.15857506 [12564] [16836] dopus: Change modified on C:\ProgramData\NGC\Open Mobile\Profiles\30924 00000244 12.77155495 [13144] avcore\npsm\localprovider\baseprovider\lib\baseprovider.cpp(604)\NPSMDesktopProvider.dll!00007FF8DF5539A4: (caller: 00007FF8DF554113) ReturnHr(120) tid(108c) 80070490 Element not found. 00000245 12.86984634 [15992] windows\core\console\open\src\host\srvinit.cpp(480)\ConhostV2.dll!00007FF92FEF17FB: (caller: 00007FF92FF00628) ReturnHr(4837) tid(1790) 80070032 The request is not supported. 00000246 13.10928631 [16372] ***L_FreeThreadData 00000247 13.10931206 [16372] ***L_AllocThreadData 00000248 13.10935688 [16372] ***InitThreadData