"Time of Day","Process Name","PID","Operation","Path","Result","Detail","Sequence"
"19:03:49.3497045","dopus.exe","16636","CreateFile","D:\","SUCCESS","Desired Access: Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3497466","dopus.exe","16636","QueryNameInformationFile","D:\","SUCCESS","Name: \","n/a"
"19:03:49.3497732","dopus.exe","16636","QueryAttributeInformationVolume","D:\","SUCCESS","FileSystemAttributes: Case Preserved, Case Sensitive, Unicode, ACLs, Compression, Named Streams, EFS, Object IDs, Reparse Points, Sparse Files, Quotas, Transactions, 0x3c00600, MaximumComponentNameLength: 255, FileSystemName: NTFS","n/a"
"19:03:49.3497934","dopus.exe","16636","CloseFile","D:\","SUCCESS","","n/a"
"19:03:49.3498732","dopus.exe","16636","CreateFile","D:\","SUCCESS","Desired Access: Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3499002","dopus.exe","16636","QueryNameInformationFile","D:\","SUCCESS","Name: \","n/a"
"19:03:49.3499205","dopus.exe","16636","QueryAttributeInformationVolume","D:\","SUCCESS","FileSystemAttributes: Case Preserved, Case Sensitive, Unicode, ACLs, Compression, Named Streams, EFS, Object IDs, Reparse Points, Sparse Files, Quotas, Transactions, 0x3c00600, MaximumComponentNameLength: 255, FileSystemName: NTFS","n/a"
"19:03:49.3499941","dopus.exe","16636","CloseFile","D:\","SUCCESS","","n/a"
"19:03:49.3602748","dopus.exe","16636","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3602909","dopus.exe","16636","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3603186","dopus.exe","16636","RegQueryKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Query: Cached, SubKeys: 0, Values: 11","n/a"
"19:03:49.3603335","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 0, Name: {A6595CD1-BF77-430A-A452-18696685F7C7}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3603496","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 1, Name: {7E74422F-2393-11D4-98E0-444553540000}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3603640","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 2, Name: {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3603779","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 3, Name: {705977C7-86CB-4743-BFAF-6908BD19B7B0}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3603919","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 4, Name: {DB34D5DC-D41A-482E-A5EF-8FA0F88761DA}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604070","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 5, Name: {5F8D079B-8CE6-4F58-BF10-55C1B68D88F3}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604256","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 6, Name: {9B5F5829-A529-4B12-814A-E81BCB8D93FC}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604419","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 7, Name: {30351349-7B7D-4FCC-81B4-1E394CA267EB}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604560","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 8, Name: {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604702","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 9, Name: {4E716236-AA30-4C65-B225-D68BBA81E9C2}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604840","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","Index: 10, Name: {C539A15A-3AF9-4c92-B771-50CB78F5C751}, Type: REG_SZ, Length: 2, Data: ","n/a"
"19:03:49.3604984","dopus.exe","16636","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","NO MORE ENTRIES","Index: 11, Length: 220","n/a"
"19:03:49.3605570","dopus.exe","16636","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked","SUCCESS","","n/a"
"19:03:49.3605854","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3606012","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3606129","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3606266","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3606431","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 14, Values: 0","n/a"
"19:03:49.3606576","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Name","n/a"
"19:03:49.3606720","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3606899","dopus.exe","16636","RegOpenKey","HKCR\PackagedCom\Package","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read","n/a"
"19:03:49.3607157","dopus.exe","16636","RegQueryKey","HKCR\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 13, Values: 0","n/a"
"19:03:49.3607307","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3607431","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Desired Access: Query Value, Enumerate Sub Keys","n/a"
"19:03:49.3607650","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 14, Values: 0","n/a"
"19:03:49.3607767","dopus.exe","16636","RegQueryKey","HKCR\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 13, Values: 0","n/a"
"19:03:49.3607879","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 0, Name: AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","n/a"
"19:03:49.3608101","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 0, Name: AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","n/a"
"19:03:49.3608234","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 1, Name: MaxInstallOrder","n/a"
"19:03:49.3608339","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 1, Name: Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3608441","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 2, Name: Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3608536","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 3, Name: Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3608635","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 2, Name: Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3608739","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 4, Name: Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3608845","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 3, Name: Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609001","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 5, Name: Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609106","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 4, Name: Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609254","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 6, Name: Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609443","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 5, Name: Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609720","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 7, Name: Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609864","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 6, Name: Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3609998","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 8, Name: Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610124","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 7, Name: Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610251","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 9, Name: Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610371","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 8, Name: Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610494","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 10, Name: Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610614","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 9, Name: Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3610723","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 11, Name: Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3610822","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 10, Name: Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","n/a"
"19:03:49.3610923","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 11, Name: Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3611018","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 12, Name: Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3611133","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 13, Name: Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3611238","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 12, Name: Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3611340","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","NO MORE ENTRIES","Index: 14, Length: 288","n/a"
"19:03:49.3611459","dopus.exe","16636","RegCloseKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","","n/a"
"19:03:49.3611562","dopus.exe","16636","RegCloseKey","HKCR\PackagedCom\Package","SUCCESS","","n/a"
"19:03:49.3611679","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Name","n/a"
"19:03:49.3611812","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3611936","dopus.exe","16636","RegOpenKey","HKCR\PackagedCom\Package","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read","n/a"
"19:03:49.3612080","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 14, Values: 0","n/a"
"19:03:49.3612180","dopus.exe","16636","RegQueryKey","HKCR\PackagedCom\Package","SUCCESS","Query: Cached, SubKeys: 13, Values: 0","n/a"
"19:03:49.3612292","dopus.exe","16636","RegCloseKey","HKCR\PackagedCom\Package","SUCCESS","","n/a"
"19:03:49.3612414","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: Name","n/a"
"19:03:49.3612532","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3612645","dopus.exe","16636","RegOpenKey","HKCR\PackagedCom\Package","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read","n/a"
"19:03:49.3612772","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 0, Name: AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","n/a"
"19:03:49.3612881","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 0, Name: AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","n/a"
"19:03:49.3613091","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3613249","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3613336","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3613443","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3613641","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3613918","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: Name","n/a"
"19:03:49.3614044","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3614185","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3614383","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3614492","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: Name","n/a"
"19:03:49.3614614","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3615062","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3615230","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3615328","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: Name","n/a"
"19:03:49.3615479","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3615598","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3615745","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.3615841","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\Path","SUCCESS","Type: REG_SZ, Length: 160, Data: C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","n/a"
"19:03:49.3616920","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3617280","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.3617589","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.3617699","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 2, Length: 1","n/a"
"19:03:49.3617812","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 3, Length: 8,192","n/a"
"19:03:49.3620455","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 8,195, Length: 8,192","n/a"
"19:03:49.3622972","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 16,387, Length: 8,192","n/a"
"19:03:49.3625424","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 24,579, Length: 8,192","n/a"
"19:03:49.3627848","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 32,771, Length: 8,192","n/a"
"19:03:49.3630339","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","Offset: 40,963, Length: 3,455","n/a"
"19:03:49.3631457","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","END OF FILE","Offset: 44,418, Length: 8,192","n/a"
"19:03:49.3631592","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","END OF FILE","Offset: 44,418, Length: 8,192","n/a"
"19:03:49.3657950","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.3659884","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa","SUCCESS","","n/a"
"19:03:49.3660143","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 1, Name: MaxInstallOrder","n/a"
"19:03:49.3660322","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 1, Name: Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3660665","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3660833","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3660948","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3661102","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\MaxInstallOrder","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3661366","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\MaxInstallOrder","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3661645","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","BUFFER TOO SMALL","Query: Name, Length: 0","n/a"
"19:03:49.3661776","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3662005","dopus.exe","16636","RegOpenKey","HKLM\SOFTWARE\Microsoft\AppModel\Lookaside\user\software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\MaxInstallOrder","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3662377","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 2, Name: Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3662679","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3662872","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3662989","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3663168","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3663415","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3663707","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3663913","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3664098","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3664294","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3664430","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3664558","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3664688","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3664884","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3664980","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3665097","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3665236","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3665396","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.3665492","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 182, Data: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3666540","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3666927","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.3667220","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.3667389","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.3670205","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 2,938","n/a"
"19:03:49.3671230","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 11,132, Length: 8,192","n/a"
"19:03:49.3671386","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 11,132, Length: 8,192","n/a"
"19:03:49.3675662","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.3676244","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.DesktopAppInstaller_1.17.10271.0_x64__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.3676470","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 3, Name: Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3676626","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 2, Name: Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3676882","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3677087","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3677208","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3677356","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3677583","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3677926","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3678085","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3678271","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3678468","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3678642","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3678833","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3679014","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3679211","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3679339","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3679485","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3679642","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3679834","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.3679965","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 180, Data: C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.3681162","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3681545","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.3681849","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.3681962","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 1","n/a"
"19:03:49.3682077","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 3, Length: 8,192","n/a"
"19:03:49.3685614","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,195, Length: 8,192","n/a"
"19:03:49.3688200","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,387, Length: 7,309","n/a"
"19:03:49.3690392","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 23,696, Length: 8,192","n/a"
"19:03:49.3690538","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 23,696, Length: 8,192","n/a"
"19:03:49.3705492","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.3707314","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Microsoft3DViewer_7.2107.7012.0_x64__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.3707540","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 4, Name: Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3707712","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 3, Name: Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3708164","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3708437","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3708543","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3708736","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3709048","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3709588","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3709979","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3710336","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3710664","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3710940","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3711101","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3711243","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3711393","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3711576","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3711774","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3711892","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3712024","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3712211","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3712372","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3712548","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.3712659","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 200, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3714234","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3714716","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.3715191","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.3715538","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.3725660","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.3728692","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.3730411","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.3732426","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.3737180","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.3740591","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.3745502","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 1,396","n/a"
"19:03:49.3745873","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 58,742, Length: 8,192","n/a"
"19:03:49.3956920","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 58,742, Length: 8,192","n/a"
"19:03:49.3981700","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.3983752","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Access_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.3983967","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 5, Name: Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3984118","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 4, Name: Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3984461","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.3984637","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3984736","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3984887","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.3985277","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.3985626","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3985764","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3985905","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3986121","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3986320","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3986448","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3986575","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3986706","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3986845","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3987023","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.3987132","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.3987302","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.3987435","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.3987584","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.3987762","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.3987914","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 198, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.3989187","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.3989592","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.3989910","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.3990051","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.3992619","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.3994120","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.3995580","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.3997152","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.3998493","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.3999712","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.4001558","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.4003394","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 8,192","n/a"
"19:03:49.4005233","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 73,730, Length: 8,192","n/a"
"19:03:49.4007192","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 81,922, Length: 8,192","n/a"
"19:03:49.4008470","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 90,114, Length: 8,192","n/a"
"19:03:49.4009722","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 98,306, Length: 8,192","n/a"
"19:03:49.4011022","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 106,498, Length: 8,192","n/a"
"19:03:49.4012287","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 114,690, Length: 7,945","n/a"
"19:03:49.4013532","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 122,635, Length: 8,192","n/a"
"19:03:49.4710903","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 122,635, Length: 8,192","n/a"
"19:03:49.4765639","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.4771085","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Excel_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.4771327","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 6, Name: Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.4771488","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 5, Name: Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.4771987","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.4772170","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.4772335","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.4772515","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.4772829","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.4773203","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.4773351","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.4773493","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.4773699","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.4773905","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.4774035","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.4774209","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.4774350","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.4774506","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.4774829","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.4774942","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.4775070","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.4775200","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.4775343","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.4775519","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.4775630","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 202, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.4776833","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.4777245","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.4777575","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.4777772","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.4779580","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.4781082","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.4782424","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.4784360","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.4786151","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.4787489","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.4789086","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.4790497","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 767","n/a"
"19:03:49.4790988","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 66,305, Length: 8,192","n/a"
"19:03:49.4978894","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 66,305, Length: 8,192","n/a"
"19:03:49.5006889","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.5009498","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Outlook_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.5009732","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 7, Name: Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5009901","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 6, Name: Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5010374","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.5010645","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5010823","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5011017","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.5011325","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.5011713","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5011878","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5012054","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5012259","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5012620","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5012781","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5012936","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5013134","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5013323","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5013536","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5013673","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5013824","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5013984","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5014162","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5014376","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.5014559","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 208, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5015970","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.5016422","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.5016770","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.5017014","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.5018818","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.5020329","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.5021609","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.5023010","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.5024374","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.5025623","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.5027059","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.5028420","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 8,192","n/a"
"19:03:49.5029852","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 73,730, Length: 8,192","n/a"
"19:03:49.5031295","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 81,922, Length: 8,192","n/a"
"19:03:49.5032890","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 90,114, Length: 8,192","n/a"
"19:03:49.5034977","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 98,306, Length: 2,233","n/a"
"19:03:49.5035516","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 100,539, Length: 8,192","n/a"
"19:03:49.5424438","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 100,539, Length: 8,192","n/a"
"19:03:49.5461686","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.5464922","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.PowerPoint_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.5465132","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 8, Name: Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5465399","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 7, Name: Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5465807","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.5465973","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5466071","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5466240","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.5466486","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.5466812","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5466946","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5467095","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5467256","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5467447","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5467567","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5467686","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5467856","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5467994","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5468165","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5468268","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5468389","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5468527","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5468667","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5468834","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.5468937","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 206, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5470253","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.5470695","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.5471034","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.5471173","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.5472837","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.5474283","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.5475582","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 3,889","n/a"
"19:03:49.5476218","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 28,467, Length: 8,192","n/a"
"19:03:49.5520660","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 28,467, Length: 8,192","n/a"
"19:03:49.5532121","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.5533300","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Publisher_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.5533492","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 9, Name: Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5533638","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 8, Name: Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5533964","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.5534131","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5534229","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5534367","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.5534599","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.5534927","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5535058","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5535194","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5535361","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5535639","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5535806","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5535931","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5536056","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5536191","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5536362","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.5536468","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","BUFFER OVERFLOW","Query: Name, Length: 392","n/a"
"19:03:49.5536599","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.5536726","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.5536858","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.5537026","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.5537129","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 196, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.5538373","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.5538836","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.5539164","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.5539307","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.5540952","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.5542450","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.5543876","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.5545505","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.5547196","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.5548742","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.5550124","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.5551502","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 8,192","n/a"
"19:03:49.5552786","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 73,730, Length: 8,192","n/a"
"19:03:49.5554075","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 81,922, Length: 8,192","n/a"
"19:03:49.5555276","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 90,114, Length: 8,192","n/a"
"19:03:49.5556737","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 98,306, Length: 8,192","n/a"
"19:03:49.5558147","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 106,498, Length: 6,346","n/a"
"19:03:49.5559134","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 112,844, Length: 8,192","n/a"
"19:03:49.6067205","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 112,844, Length: 8,192","n/a"
"19:03:49.6111007","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.6114742","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop.Word_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.6114992","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 10, Name: Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.6115287","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 9, Name: Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.6115575","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.6115780","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.6115880","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.6116024","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.6116272","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.6116613","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.6116825","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.6117035","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.6117226","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.6117354","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.6117492","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.6117633","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.6117808","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.6117919","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.6118048","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.6118185","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.6118389","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.6118499","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 186, Data: C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","n/a"
"19:03:49.6119806","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.6120231","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.6120616","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.6120964","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.6122616","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.6124184","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.6125601","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.6126873","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.6128032","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.6129227","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.6130559","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.6131869","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 8,192","n/a"
"19:03:49.6133221","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 73,730, Length: 8,192","n/a"
"19:03:49.6134546","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 81,922, Length: 8,192","n/a"
"19:03:49.6135748","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 90,114, Length: 8,192","n/a"
"19:03:49.6136971","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 98,306, Length: 8,192","n/a"
"19:03:49.6138143","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 106,498, Length: 8,192","n/a"
"19:03:49.6139343","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 114,690, Length: 8,192","n/a"
"19:03:49.6140728","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 122,882, Length: 8,192","n/a"
"19:03:49.6141951","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 131,074, Length: 8,192","n/a"
"19:03:49.6143135","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 139,266, Length: 8,192","n/a"
"19:03:49.6144344","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 147,458, Length: 8,192","n/a"
"19:03:49.6145730","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 155,650, Length: 8,192","n/a"
"19:03:49.6146994","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 163,842, Length: 8,192","n/a"
"19:03:49.6148283","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 172,034, Length: 8,192","n/a"
"19:03:49.6149582","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 180,226, Length: 8,192","n/a"
"19:03:49.6150818","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 188,418, Length: 8,192","n/a"
"19:03:49.6152077","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 196,610, Length: 8,192","n/a"
"19:03:49.6153342","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 204,802, Length: 8,192","n/a"
"19:03:49.6154593","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 212,994, Length: 8,192","n/a"
"19:03:49.6155848","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 221,186, Length: 8,192","n/a"
"19:03:49.6157100","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 229,378, Length: 8,192","n/a"
"19:03:49.6158398","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 237,570, Length: 8,192","n/a"
"19:03:49.6160011","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 245,762, Length: 2,094","n/a"
"19:03:49.6160476","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 247,856, Length: 8,192","n/a"
"19:03:49.6472096","dopus.exe","16636","Process Profiling","","SUCCESS","User Time: 32.1250000 seconds, Kernel Time: 36.4531250 seconds, Private Bytes: 47,788,032, Working Set: 95,838,208","n/a"
"19:03:49.7851494","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 247,856, Length: 8,192","n/a"
"19:03:49.7947791","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.7956888","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.Office.Desktop_16051.15028.20204.0_x86__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.7957109","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 11, Name: Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7957272","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 10, Name: Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","n/a"
"19:03:49.7957596","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.7957805","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7957908","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7958056","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7958348","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Desired Access: Read","n/a"
"19:03:49.7958686","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: Name","n/a"
"19:03:49.7958875","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7959040","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7959231","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7959356","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: Name","n/a"
"19:03:49.7959490","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7959630","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7959807","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7959917","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: Name","n/a"
"19:03:49.7960048","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7960180","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7960347","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.7960459","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Path","SUCCESS","Type: REG_SZ, Length: 158, Data: C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","n/a"
"19:03:49.7961632","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.7962049","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.7962386","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.7962512","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Offset: 2, Length: 1","n/a"
"19:03:49.7962637","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Offset: 3, Length: 8,192","n/a"
"19:03:49.7965886","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","Offset: 8,195, Length: 125","n/a"
"19:03:49.7966120","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","END OF FILE","Offset: 8,320, Length: 8,192","n/a"
"19:03:49.7966270","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","END OF FILE","Offset: 8,320, Length: 8,192","n/a"
"19:03:49.7970067","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.7970609","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c","SUCCESS","","n/a"
"19:03:49.7970783","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 11, Name: Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7971037","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.7971223","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7971330","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7971511","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7971722","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7971936","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","BUFFER TOO SMALL","Query: Name, Length: 0","n/a"
"19:03:49.7972055","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.7972281","dopus.exe","16636","RegOpenKey","HKLM\SOFTWARE\Microsoft\AppModel\Lookaside\user\software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7972520","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 12, Name: Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7972727","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.7972950","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7973049","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7973167","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7973352","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.7973614","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7973798","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7973944","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7974130","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7974251","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7974394","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7974525","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7974697","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7974805","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7974953","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7975089","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7975260","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.7975369","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 178, Data: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7976430","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.7976793","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.7977047","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.7977184","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.7979934","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.7982304","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 7,190","n/a"
"19:03:49.7984433","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 23,576, Length: 8,192","n/a"
"19:03:49.7984586","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 23,576, Length: 8,192","n/a"
"19:03:49.7992643","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.7993472","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.XboxGamingOverlay_5.722.3302.0_x64__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.7993639","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","Index: 13, Name: Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7993772","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","SUCCESS","Index: 12, Name: Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7994001","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.7994175","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7994274","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7994410","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Read","n/a"
"19:03:49.7994623","dopus.exe","16636","RegOpenKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Desired Access: Read","n/a"
"19:03:49.7995080","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7995225","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7995413","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7995597","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7995721","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7995857","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7996031","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7996206","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 12","n/a"
"19:03:49.7996314","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: Name","n/a"
"19:03:49.7996446","dopus.exe","16636","RegQueryKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.7996581","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.7996750","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\Path","BUFFER OVERFLOW","Length: 144","n/a"
"19:03:49.7996859","dopus.exe","16636","RegQueryValue","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\Path","SUCCESS","Type: REG_SZ, Length: 164, Data: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","n/a"
"19:03:49.7997933","dopus.exe","16636","CreateFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened","n/a"
"19:03:49.7998300","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2, Priority: Normal","n/a"
"19:03:49.7998544","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 0, Length: 2","n/a"
"19:03:49.7998682","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 2, Length: 8,192","n/a"
"19:03:49.8001473","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 8,194, Length: 8,192","n/a"
"19:03:49.8004030","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 16,386, Length: 8,192","n/a"
"19:03:49.8006398","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 24,578, Length: 8,192","n/a"
"19:03:49.8008601","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 32,770, Length: 8,192","n/a"
"19:03:49.8010906","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 40,962, Length: 8,192","n/a"
"19:03:49.8013144","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 49,154, Length: 8,192","n/a"
"19:03:49.8015340","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 57,346, Length: 8,192","n/a"
"19:03:49.8017671","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 65,538, Length: 8,192","n/a"
"19:03:49.8020016","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 73,730, Length: 8,192","n/a"
"19:03:49.8022464","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 81,922, Length: 8,192","n/a"
"19:03:49.8024772","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 90,114, Length: 8,192","n/a"
"19:03:49.8027106","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 98,306, Length: 8,192","n/a"
"19:03:49.8029583","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 106,498, Length: 8,192","n/a"
"19:03:49.8032030","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","Offset: 114,690, Length: 3,615","n/a"
"19:03:49.8033288","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 118,305, Length: 8,192","n/a"
"19:03:49.8033437","dopus.exe","16636","ReadFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","END OF FILE","Offset: 118,305, Length: 8,192","n/a"
"19:03:49.8078458","dopus.exe","16636","CloseFile","C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe\AppxManifest.xml","SUCCESS","","n/a"
"19:03:49.8082280","dopus.exe","16636","RegCloseKey","HKCR\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\Microsoft.YourPhone_1.22022.180.0_x64__8wekyb3d8bbwe","SUCCESS","","n/a"
"19:03:49.8082506","dopus.exe","16636","RegEnumKey","HKCU\Software\Classes\PackagedCom\Package","NO MORE ENTRIES","Index: 14, Length: 288","n/a"
"19:03:49.8082655","dopus.exe","16636","RegEnumKey","HKCR\PackagedCom\Package","NO MORE ENTRIES","Index: 13, Length: 288","n/a"
"19:03:49.8082803","dopus.exe","16636","RegCloseKey","HKCR\PackagedCom\Package","SUCCESS","","n/a"
"19:03:49.8082967","dopus.exe","16636","RegCloseKey","HKCU\Software\Classes\PackagedCom\Package","SUCCESS","","n/a"
"19:03:49.8083921","dopus.exe","16636","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8084153","dopus.exe","16636","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume","SUCCESS","Desired Access: Read","n/a"
"19:03:49.8084383","dopus.exe","16636","RegQueryKey","HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8084525","dopus.exe","16636","RegOpenKey","HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{31ce6370-52b4-4624-a4ab-f4a240a1ce73}\","SUCCESS","Desired Access: Read","n/a"
"19:03:49.8084753","dopus.exe","16636","RegCloseKey","HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume","SUCCESS","","n/a"
"19:03:49.8084927","dopus.exe","16636","RegQueryValue","HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{31ce6370-52b4-4624-a4ab-f4a240a1ce73}\Generation","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1","n/a"
"19:03:49.8085108","dopus.exe","16636","RegCloseKey","HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{31ce6370-52b4-4624-a4ab-f4a240a1ce73}","SUCCESS","","n/a"
"19:03:49.8085233","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.8085394","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8085486","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8085601","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Drive\shellex\FolderExtensions","NAME NOT FOUND","Desired Access: Enumerate Sub Keys","n/a"
"19:03:49.8085769","dopus.exe","16636","RegOpenKey","HKCR\Drive\shellex\FolderExtensions","SUCCESS","Desired Access: Enumerate Sub Keys","n/a"
"19:03:49.8085949","dopus.exe","16636","RegQueryKey","HKCR\Drive\shellex\FolderExtensions","SUCCESS","Query: Name","n/a"
"19:03:49.8086085","dopus.exe","16636","RegQueryKey","HKCR\Drive\shellex\FolderExtensions","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8086241","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Drive\shellex\FolderExtensions","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.8086396","dopus.exe","16636","RegEnumKey","HKCR\Drive\shellex\FolderExtensions","SUCCESS","Index: 0, Name: {fbeb8a05-beee-4442-804e-409d6c4515e9}","n/a"
"19:03:49.8086540","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name","n/a"
"19:03:49.8086675","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8086769","dopus.exe","16636","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8086878","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","NAME NOT FOUND","Desired Access: Query Value","n/a"
"19:03:49.8087026","dopus.exe","16636","RegOpenKey","HKCR\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","SUCCESS","Desired Access: Query Value","n/a"
"19:03:49.8087186","dopus.exe","16636","RegQueryKey","HKCR\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","SUCCESS","Query: Name","n/a"
"19:03:49.8087321","dopus.exe","16636","RegQueryKey","HKCR\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","SUCCESS","Query: HandleTags, HandleTags: 0x0","n/a"
"19:03:49.8087462","dopus.exe","16636","RegOpenKey","HKCU\Software\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","NAME NOT FOUND","Desired Access: Maximum Allowed","n/a"
"19:03:49.8087615","dopus.exe","16636","RegQueryValue","HKCR\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask","SUCCESS","Type: REG_DWORD, Length: 4, Data: 32","n/a"
"19:03:49.8087748","dopus.exe","16636","RegCloseKey","HKCR\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}","SUCCESS","","n/a"
"19:03:49.8087870","dopus.exe","16636","RegEnumKey","HKCR\Drive\shellex\FolderExtensions","NO MORE ENTRIES","Index: 1, Length: 288","n/a"
"19:03:49.8087994","dopus.exe","16636","RegCloseKey","HKCR\Drive\shellex\FolderExtensions","SUCCESS","","n/a"