Advertisement
Guest User

Client Logs

a guest
Aug 19th, 2018
82
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.23 KB | None | 0 0
  1. [2018-08-19T09:25:32] INFO: connecting to service...
  2. [2018-08-19T09:25:35] INFO: connection established
  3. [2018-08-19T09:25:32] DEBUG1: registered event type IpcServerEvents::messageReceived as 5
  4. [2018-08-19T09:25:32] DEBUG1: thread 0x000015e8 entry
  5. [2018-08-19T09:25:32] DEBUG: adopting new buffer
  6. [2018-08-19T09:25:32] DEBUG: event queue is ready
  7. [2018-08-19T09:25:32] DEBUG1: thread 0x00001e30 entry
  8. [2018-08-19T09:25:32] DEBUG1: thread 0x00004480 entry
  9. [2018-08-19T09:25:32] DEBUG: found sas.dll
  10. [2018-08-19T09:25:32] DEBUG: accepted ipc client connection
  11. [2018-08-19T09:25:32] DEBUG1: registered event type IStreamEvents::inputReady as 6
  12. [2018-08-19T09:25:32] DEBUG1: registered event type IStreamEvents::outputError as 7
  13. [2018-08-19T09:25:32] DEBUG1: registered event type IStreamEvents::inputShutdown as 8
  14. [2018-08-19T09:25:32] DEBUG1: registered event type IStreamEvents::outputShutdown as 9
  15. [2018-08-19T09:25:32] DEBUG1: registered event type IpcClientProxyEvents::disconnected as 10
  16. [2018-08-19T09:25:32] DEBUG1: registered event type IpcClientProxyEvents::messageReceived as 11
  17. [2018-08-19T09:25:32] DEBUG1: registered event type IpcServerEvents::clientConnected as 12
  18. [2018-08-19T09:25:35] DEBUG: start ipc handle data
  19. [2018-08-19T09:25:35] DEBUG: ipc read: IHEL
  20. [2018-08-19T09:25:35] DEBUG: finished ipc handle data
  21. [2018-08-19T09:25:35] DEBUG: ipc hello, type=gui
  22. [2018-08-19T09:25:35] INFO: watchdog status: error
  23. [2018-08-19T09:25:35] DEBUG1: registered event type IStreamEvents::outputFlushed as 13
  24. [2018-08-19T09:25:53] DEBUG: starting process
  25. [2018-08-19T09:25:53] INFO: starting client
  26. [2018-08-19T09:25:53] INFO: command: "C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  27. [2018-08-19T09:25:53] INFO: config file: C:/Users/carsy/AppData/Local/Temp/Synergy.lY9404
  28. [2018-08-19T09:25:53] INFO: log level: DEBUG1
  29. [2018-08-19T09:25:53] DEBUG: start ipc handle data
  30. [2018-08-19T09:25:53] DEBUG: ipc read: ICMD
  31. [2018-08-19T09:25:53] DEBUG: finished ipc handle data
  32. [2018-08-19T09:25:53] DEBUG: new command, elevate=0 command="C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  33. [2018-08-19T09:25:53] INFO: service command updated
  34. [2018-08-19T09:25:54] DEBUG: getting elevated token, elevation required
  35. [2018-08-19T09:25:54] DEBUG: processes in session 1: csrss.exe, winlogon.exe, fontdrvhost.exe, dwm.exe, sihost.exe, svchost.exe, svchost.exe, HPJumpStartLaunch.exe, taskhostw.exe, ctfmon.exe, explorer.exe, dptf_helper.exe, igfxEM.exe, ShellExperienceHost.exe, SearchUI.exe, RuntimeBroker.exe, RuntimeBroker.exe, SkypeHost.exe, SettingSyncHost.exe, RuntimeBroker.exe, RuntimeBroker.exe, svchost.exe, MSASCuiL.exe, RtkNGUI64.exe, RAVBg64.exe, OneDrive.exe, Steam.exe, steamwebhelper.exe, steamwebhelper.exe, steamwebhelper.exe, Spotify.exe, Spotify.exe, Spotify.exe, HPMSGSVC.exe, Spotify.exe, RtlS5Wake.exe, Creative Cloud.exe, AdobeIPCBroker.exe, Discord.exe, unsecapp.exe, Adobe CEF Helper.exe, Adobe Desktop Service.exe, Discord.exe, steamwebhelper.exe, ModuleCoreService.exe, conhost.exe, CoreSync.exe, CCXProcess.exe, node.exe, conhost.exe, HPAudioSwitch.exe, Discord.exe, CCLibrary.exe, node.exe, conhost.exe, Discord.exe, FileCoAuth.exe, dllhost.exe, Photoshop.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Microsoft.Photos.exe, LockApp.exe, RuntimeBroker.exe, SystemSettingsBroker.exe, ApplicationFrameHost.exe, MicrosoftEdge.exe, browser_broker.exe, RuntimeBroker.exe, MicrosoftEdgeCP.exe, MicrosoftEdgeCP.exe, SystemSettings.exe, steamwebhelper.exe, notepad.exe, rundll32.exe, notepad.exe, Rainmeter.exe, McVsShld.exe, McUICnt.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, atom.exe, atom.exe, atom.exe, atom.exe, chrome.exe, chrome.exe, chrome.exe, smartscreen.exe, synergy.exe, backgroundTaskHost.exe,
  36. [2018-08-19T09:25:54] DEBUG: found winlogon.exe in session 1
  37. [2018-08-19T09:25:54] DEBUG: got token 112, duplicating
  38. [2018-08-19T09:25:54] DEBUG: duplicated, new token: 108
  39. [2018-08-19T09:25:54] INFO: starting new process
  40. [2018-08-19T09:25:54] DEBUG: launched syntool to check active desktop
  41. [2018-08-19T09:25:54] INFO: activeDesktop:Default
  42. [2018-08-19T09:25:54] ERROR: could not get session id for process id 8388
  43. [2018-08-19T09:25:54] DEBUG: processes in session 1: csrss.exe, winlogon.exe, fontdrvhost.exe, dwm.exe, sihost.exe, svchost.exe, svchost.exe, HPJumpStartLaunch.exe, taskhostw.exe, ctfmon.exe, explorer.exe, dptf_helper.exe, igfxEM.exe, ShellExperienceHost.exe, SearchUI.exe, RuntimeBroker.exe, RuntimeBroker.exe, SkypeHost.exe, SettingSyncHost.exe, RuntimeBroker.exe, RuntimeBroker.exe, svchost.exe, MSASCuiL.exe, RtkNGUI64.exe, RAVBg64.exe, OneDrive.exe, Steam.exe, steamwebhelper.exe, steamwebhelper.exe, steamwebhelper.exe, Spotify.exe, Spotify.exe, Spotify.exe, HPMSGSVC.exe, Spotify.exe, RtlS5Wake.exe, Creative Cloud.exe, AdobeIPCBroker.exe, Discord.exe, unsecapp.exe, Adobe CEF Helper.exe, Adobe Desktop Service.exe, Discord.exe, steamwebhelper.exe, ModuleCoreService.exe, conhost.exe, CoreSync.exe, CCXProcess.exe, node.exe, conhost.exe, HPAudioSwitch.exe, Discord.exe, CCLibrary.exe, node.exe, conhost.exe, Discord.exe, FileCoAuth.exe, dllhost.exe, Photoshop.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Microsoft.Photos.exe, LockApp.exe, RuntimeBroker.exe, SystemSettingsBroker.exe, ApplicationFrameHost.exe, MicrosoftEdge.exe, browser_broker.exe, RuntimeBroker.exe, MicrosoftEdgeCP.exe, MicrosoftEdgeCP.exe, SystemSettings.exe, steamwebhelper.exe, notepad.exe, rundll32.exe, notepad.exe, Rainmeter.exe, McVsShld.exe, McUICnt.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, atom.exe, atom.exe, atom.exe, atom.exe, chrome.exe, chrome.exe, chrome.exe, smartscreen.exe, synergy.exe, backgroundTaskHost.exe, syntool.exe,
  44. [2018-08-19T09:25:54] DEBUG: did not find logonui.exe in session 1
  45. [2018-08-19T09:25:54] DEBUG: getting non-elevated token
  46. [2018-08-19T09:25:54] DEBUG: duplicated, new token: 984
  47. [2018-08-19T09:25:54] INFO: starting new process
  48. [2018-08-19T09:25:54] INFO: drag and drop enabled
  49. [2018-08-19T09:25:54] DEBUG1: starting client
  50. [2018-08-19T09:25:54] DEBUG1: thread 0x00003d70 entry
  51. [2018-08-19T09:25:54] DEBUG: screen shape: 0,0 1920x1080
  52. [2018-08-19T09:25:54] DEBUG: window is 0x003916d6
  53. [2018-08-19T09:25:54] DEBUG: using desktop for drop target: C:\Users\carsy\OneDrive\Desktop
  54. [2018-08-19T09:25:54] DEBUG: adopting new buffer
  55. [2018-08-19T09:25:54] DEBUG: opened display
  56. [2018-08-19T09:25:54] DEBUG1: registered event type IScreenEvents::error as 4
  57. [2018-08-19T09:25:54] DEBUG1: registered event type IScreenEvents::suspend as 5
  58. [2018-08-19T09:25:54] DEBUG1: registered event type IScreenEvents::resume as 6
  59. [2018-08-19T09:25:54] DEBUG1: registered event type FileEvents::fileChunkSending as 7
  60. [2018-08-19T09:25:54] DEBUG1: registered event type FileEvents::fileRecieveCompleted as 8
  61. [2018-08-19T09:25:54] DEBUG1: registered event type ClientEvents::connected as 9
  62. [2018-08-19T09:25:54] DEBUG1: registered event type ClientEvents::connectionFailed as 10
  63. [2018-08-19T09:25:54] DEBUG1: registered event type ClientEvents::disconnected as 11
  64. [2018-08-19T09:25:54] NOTE: started client
  65. [2018-08-19T09:25:54] NOTE: connecting to '192.168.0.10': 192.168.0.10:24800
  66. [2018-08-19T09:25:54] DEBUG1: connecting to server
  67. [2018-08-19T09:25:54] DEBUG1: registered event type IDataSocketEvents::connected as 12
  68. [2018-08-19T09:25:54] DEBUG1: registered event type IDataSocketEvents::connectionFailed as 13
  69. [2018-08-19T09:25:54] DEBUG1: registered event type IStreamEvents::inputReady as 14
  70. [2018-08-19T09:25:54] DEBUG1: registered event type IpcServerProxyEvents::messageReceived as 15
  71. [2018-08-19T09:25:54] DEBUG1: registered event type IpcClientEvents::messageReceived as 16
  72. [2018-08-19T09:25:54] DEBUG: event queue is ready
  73. [2018-08-19T09:25:54] DEBUG: add pending events to buffer
  74. [2018-08-19T09:25:54] DEBUG1: registered event type IpcClientEvents::connected as 17
  75. [2018-08-19T09:25:54] DEBUG: accepted ipc client connection
  76. [2018-08-19T09:25:54] DEBUG1: registered event type IStreamEvents::outputFlushed as 18
  77. [2018-08-19T09:25:54] DEBUG: start ipc handle data
  78. [2018-08-19T09:25:54] DEBUG: ipc read: IHEL
  79. [2018-08-19T09:25:54] DEBUG: finished ipc handle data
  80. [2018-08-19T09:25:54] DEBUG: ipc hello, type=node
  81. [2018-08-19T09:25:54] INFO: watchdog status: ok
  82. [2018-08-19T09:25:54] DEBUG1: registered event type IStreamEvents::inputShutdown as 19
  83. [2018-08-19T09:25:54] DEBUG1: connected; wait for hello
  84. [2018-08-19T09:25:54] DEBUG1: registered event type ISocketEvents::disconnected as 20
  85. [2018-08-19T09:25:54] DEBUG1: registered event type IStreamEvents::outputError as 21
  86. [2018-08-19T09:25:54] DEBUG1: registered event type IStreamEvents::outputShutdown as 22
  87. [2018-08-19T09:25:54] DEBUG1: registered event type ISocketEvents::stopRetry as 23
  88. [2018-08-19T09:25:54] DEBUG1: got hello version 1.6
  89. [2018-08-19T09:25:54] DEBUG1: say hello version 1.6
  90. [2018-08-19T09:25:54] DEBUG1: registered event type ClipboardEvents::clipboardSending as 24
  91. [2018-08-19T09:25:54] DEBUG1: registered event type IScreenEvents::shapeChanged as 25
  92. [2018-08-19T09:25:54] DEBUG1: registered event type ClipboardEvents::clipboardGrabbed as 26
  93. [2018-08-19T09:25:54] DEBUG1: sending info shape=0,0 1920x1080
  94. [2018-08-19T09:25:54] DEBUG1: recv info acknowledgment
  95. [2018-08-19T09:25:54] DEBUG1: recv reset options
  96. [2018-08-19T09:25:54] DEBUG1: recv set options size=28
  97. [2018-08-19T09:25:54] DEBUG1: half-duplex caps-lock off
  98. [2018-08-19T09:25:54] DEBUG1: half-duplex num-lock off
  99. [2018-08-19T09:25:54] DEBUG1: half-duplex scroll-lock off
  100. [2018-08-19T09:25:54] DEBUG1: screen saver synchronization on
  101. [2018-08-19T09:25:54] DEBUG1: grab the foreground window
  102. [2018-08-19T09:25:54] DEBUG1: modifiers on update: 0x0000
  103. [2018-08-19T09:25:54] DEBUG1: thread 0x000005ac entry
  104. [2018-08-19T09:25:54] DEBUG: desk Default window is 0x001b0598
  105. [2018-08-19T09:25:54] DEBUG: switched to desk "Default"
  106. [2018-08-19T09:25:54] DEBUG: desktop is now accessible
  107. [2018-08-19T09:25:54] DEBUG1: modifiers on update: 0x0000
  108. [2018-08-19T09:25:54] DEBUG1: modifiers on update: 0x0000
  109. [2018-08-19T09:25:54] DEBUG: open clipboard
  110. [2018-08-19T09:25:54] DEBUG: empty clipboard
  111. [2018-08-19T09:25:54] DEBUG: close clipboard
  112. [2018-08-19T09:25:54] DEBUG: clipboard changed: synergy owned
  113. [2018-08-19T09:25:54] DEBUG: open clipboard
  114. [2018-08-19T09:25:54] DEBUG: empty clipboard
  115. [2018-08-19T09:25:54] DEBUG: close clipboard
  116. [2018-08-19T09:25:54] NOTE: connected to server
  117. [2018-08-19T09:25:55] DEBUG: started process, session=1, elevated: no, command="C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  118. [2018-08-19T09:25:56] DEBUG1: recv enter, 1919,750 1 0000
  119. [2018-08-19T09:25:56] INFO: entering screen
  120. [2018-08-19T09:25:56] DEBUG: start receiving clipboard data
  121. [2018-08-19T09:25:56] DEBUG: receiving clipboard 0 size=4
  122. [2018-08-19T09:25:56] DEBUG: received clipboard 0 size=4
  123. [2018-08-19T09:25:56] DEBUG: open clipboard
  124. [2018-08-19T09:25:56] DEBUG: empty clipboard
  125. [2018-08-19T09:25:56] DEBUG: close clipboard
  126. [2018-08-19T09:25:56] INFO: clipboard was updated
  127. [2018-08-19T09:25:56] DEBUG: start receiving clipboard data
  128. [2018-08-19T09:25:56] DEBUG: receiving clipboard 1 size=4
  129. [2018-08-19T09:25:56] DEBUG: received clipboard 1 size=4
  130. [2018-08-19T09:25:56] DEBUG: open clipboard
  131. [2018-08-19T09:25:56] DEBUG: empty clipboard
  132. [2018-08-19T09:25:56] DEBUG: close clipboard
  133. [2018-08-19T09:25:56] INFO: clipboard was updated
  134. [2018-08-19T09:25:57] DEBUG1: recv mouse down id=1
  135. [2018-08-19T09:25:57] DEBUG1: recv mouse up id=1
  136. [2018-08-19T09:25:59] DEBUG1: recv mouse down id=1
  137. [2018-08-19T09:26:00] DEBUG1: recv mouse up id=1
  138. [2018-08-19T09:26:01] DEBUG1: recv mouse down id=1
  139. [2018-08-19T09:26:01] DEBUG1: recv leave
  140. [2018-08-19T09:26:01] INFO: leaving screen
  141. [2018-08-19T09:26:01] DEBUG1: thread 0x00002df0 entry
  142. [2018-08-19T09:26:01] DEBUG1: mapKey ef1b (61211) with mask 2000, start state: 0000
  143. [2018-08-19T09:26:01] DEBUG1: find best: 0000 2000
  144. [2018-08-19T09:26:01] DEBUG1: best key index 1 of 1 (exact)
  145. [2018-08-19T09:26:01] DEBUG1: found key in group 0
  146. [2018-08-19T09:26:01] DEBUG1: state: 0000,0000,0000
  147. [2018-08-19T09:26:01] DEBUG1: flip: 0000 (0000 vs 0000 in 0000 - 0000)
  148. [2018-08-19T09:26:01] DEBUG1: desired state: 2000 0000,0000,0000
  149. [2018-08-19T09:26:01] DEBUG1: flip: 0000 (0000 vs 2000 in ffff - 6020)
  150. [2018-08-19T09:26:01] DEBUG1: mapped to 001, new state 0000
  151. [2018-08-19T09:26:01] DEBUG1: keystrokes:
  152. [2018-08-19T09:26:01] DEBUG1: 001 (0000001b) down
  153. [2018-08-19T09:26:01] DEBUG1: keystrokes:
  154. [2018-08-19T09:26:01] DEBUG1: 001 (0000001b) up
  155. [2018-08-19T09:26:03] DEBUG: send dragging info to server: C:\Users\carsy\OneDrive\Documents\Rainmeter\Skins\@Vault\Plugins\Slider\2.2.2.41\32bit\Slider.dll
  156. [2018-08-19T09:26:03] DEBUG: send dragging file to server
  157. [2018-08-19T09:26:03] DEBUG1: thread 0x00002df0 exit
  158. [2018-08-19T09:26:03] DEBUG1: thread 0x00004a00 entry
  159. [2018-08-19T09:26:03] DEBUG1: registered event type FileEvents::keepAlive as 27
  160. [2018-08-19T09:26:03] DEBUG1: send file chunk
  161. [2018-08-19T09:26:03] DEBUG1: send file chunk
  162. [2018-08-19T09:26:03] DEBUG1: thread 0x00004a00 exit
  163. [2018-08-19T09:26:03] DEBUG1: send file chunk
  164. [2018-08-19T09:26:05] DEBUG1: recv close
  165. [2018-08-19T09:26:05] DEBUG1: thread 0x000005ac exit
  166. [2018-08-19T09:26:05] NOTE: disconnected from server
  167. [2018-08-19T09:26:05] DEBUG: retry in 1 seconds
  168. [2018-08-19T09:26:06] NOTE: connecting to '192.168.0.10': 192.168.0.10:24800
  169. [2018-08-19T09:26:06] DEBUG1: connecting to server
  170. [2018-08-19T09:26:08] DEBUG: stopping process
  171. [2018-08-19T09:26:08] DEBUG: start ipc handle data
  172. [2018-08-19T09:26:08] DEBUG: ipc read: ICMD
  173. [2018-08-19T09:26:08] DEBUG: finished ipc handle data
  174. [2018-08-19T09:26:08] DEBUG: empty command, elevate=0
  175. [2018-08-19T09:26:08] INFO: service command updated
  176. [2018-08-19T09:26:09] INFO: process started but command is empty, shutting down
  177. [2018-08-19T09:26:09] DEBUG: start ipc handle data
  178. [2018-08-19T09:26:09] DEBUG: ipc read: ISDN
  179. [2018-08-19T09:26:09] DEBUG: finished ipc handle data
  180. [2018-08-19T09:26:09] INFO: got ipc shutdown message
  181. [2018-08-19T09:26:09] DEBUG1: stopping client
  182. [2018-08-19T09:26:09] DEBUG: adopting new buffer
  183. [2018-08-19T09:26:09] DEBUG: closed display
  184. [2018-08-19T09:26:09] NOTE: stopped client
  185. [2018-08-19T09:26:09] DEBUG: ipc disconnect, closing stream
  186. [2018-08-19T09:26:09] DEBUG: ipc disconnect, closing stream
  187. [2018-08-19T09:26:09] DEBUG1: caught cancel on thread 0x00003d70
  188. [2018-08-19T09:26:09] DEBUG1: registered event type ISocketEvents::disconnected as 14
  189. [2018-08-19T09:26:09] DEBUG: ipc client disconnected
  190. [2018-08-19T09:26:09] DEBUG: ipc client proxy removed, connected=1
  191. [2018-08-19T09:26:10] INFO: process 8380 was shutdown gracefully
  192. [2018-08-19T09:27:24] DEBUG: starting process
  193. [2018-08-19T09:27:24] INFO: starting client
  194. [2018-08-19T09:27:24] INFO: command: "C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  195. [2018-08-19T09:27:24] INFO: config file: C:/Users/carsy/AppData/Local/Temp/Synergy.Xd9404
  196. [2018-08-19T09:27:24] INFO: log level: DEBUG1
  197. [2018-08-19T09:27:24] DEBUG: start ipc handle data
  198. [2018-08-19T09:27:24] DEBUG: ipc read: ICMD
  199. [2018-08-19T09:27:24] DEBUG: finished ipc handle data
  200. [2018-08-19T09:27:24] DEBUG: new command, elevate=0 command="C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  201. [2018-08-19T09:27:24] INFO: service command updated
  202. [2018-08-19T09:27:24] DEBUG: getting elevated token, elevation required
  203. [2018-08-19T09:27:24] DEBUG: processes in session 1: csrss.exe, winlogon.exe, fontdrvhost.exe, dwm.exe, sihost.exe, svchost.exe, svchost.exe, HPJumpStartLaunch.exe, taskhostw.exe, ctfmon.exe, explorer.exe, dptf_helper.exe, igfxEM.exe, ShellExperienceHost.exe, SearchUI.exe, RuntimeBroker.exe, RuntimeBroker.exe, SkypeHost.exe, SettingSyncHost.exe, RuntimeBroker.exe, RuntimeBroker.exe, svchost.exe, MSASCuiL.exe, RtkNGUI64.exe, RAVBg64.exe, OneDrive.exe, Steam.exe, steamwebhelper.exe, steamwebhelper.exe, steamwebhelper.exe, Spotify.exe, Spotify.exe, Spotify.exe, HPMSGSVC.exe, Spotify.exe, RtlS5Wake.exe, Creative Cloud.exe, AdobeIPCBroker.exe, Discord.exe, unsecapp.exe, Adobe CEF Helper.exe, Adobe Desktop Service.exe, Discord.exe, steamwebhelper.exe, ModuleCoreService.exe, conhost.exe, CoreSync.exe, CCXProcess.exe, node.exe, conhost.exe, HPAudioSwitch.exe, Discord.exe, CCLibrary.exe, node.exe, conhost.exe, Discord.exe, FileCoAuth.exe, dllhost.exe, Photoshop.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Microsoft.Photos.exe, LockApp.exe, RuntimeBroker.exe, SystemSettingsBroker.exe, ApplicationFrameHost.exe, MicrosoftEdge.exe, browser_broker.exe, RuntimeBroker.exe, MicrosoftEdgeCP.exe, MicrosoftEdgeCP.exe, SystemSettings.exe, steamwebhelper.exe, notepad.exe, rundll32.exe, notepad.exe, Rainmeter.exe, McVsShld.exe, McUICnt.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, atom.exe, atom.exe, atom.exe, atom.exe, chrome.exe, chrome.exe, chrome.exe, smartscreen.exe, synergy.exe, backgroundTaskHost.exe, RuntimeBroker.exe,
  204. [2018-08-19T09:27:24] DEBUG: found winlogon.exe in session 1
  205. [2018-08-19T09:27:24] DEBUG: got token 1016, duplicating
  206. [2018-08-19T09:27:24] DEBUG: duplicated, new token: 1028
  207. [2018-08-19T09:27:24] INFO: starting new process
  208. [2018-08-19T09:27:24] DEBUG: launched syntool to check active desktop
  209. [2018-08-19T09:27:24] INFO: activeDesktop:Default
  210. [2018-08-19T09:27:24] DEBUG: processes in session 1: csrss.exe, winlogon.exe, fontdrvhost.exe, dwm.exe, sihost.exe, svchost.exe, svchost.exe, HPJumpStartLaunch.exe, taskhostw.exe, ctfmon.exe, explorer.exe, dptf_helper.exe, igfxEM.exe, ShellExperienceHost.exe, SearchUI.exe, RuntimeBroker.exe, RuntimeBroker.exe, SkypeHost.exe, SettingSyncHost.exe, RuntimeBroker.exe, RuntimeBroker.exe, svchost.exe, MSASCuiL.exe, RtkNGUI64.exe, RAVBg64.exe, OneDrive.exe, Steam.exe, steamwebhelper.exe, steamwebhelper.exe, steamwebhelper.exe, Spotify.exe, Spotify.exe, Spotify.exe, HPMSGSVC.exe, Spotify.exe, RtlS5Wake.exe, Creative Cloud.exe, AdobeIPCBroker.exe, Discord.exe, unsecapp.exe, Adobe CEF Helper.exe, Adobe Desktop Service.exe, Discord.exe, steamwebhelper.exe, ModuleCoreService.exe, conhost.exe, CoreSync.exe, CCXProcess.exe, node.exe, conhost.exe, HPAudioSwitch.exe, Discord.exe, CCLibrary.exe, node.exe, conhost.exe, Discord.exe, FileCoAuth.exe, dllhost.exe, Photoshop.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Adobe Spaces Helper.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, CEPHtmlEngine.exe, Microsoft.Photos.exe, LockApp.exe, RuntimeBroker.exe, SystemSettingsBroker.exe, ApplicationFrameHost.exe, MicrosoftEdge.exe, browser_broker.exe, RuntimeBroker.exe, MicrosoftEdgeCP.exe, MicrosoftEdgeCP.exe, SystemSettings.exe, steamwebhelper.exe, notepad.exe, rundll32.exe, notepad.exe, Rainmeter.exe, McVsShld.exe, McUICnt.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, chrome.exe, atom.exe, atom.exe, atom.exe, atom.exe, chrome.exe, chrome.exe, chrome.exe, smartscreen.exe, synergy.exe, backgroundTaskHost.exe, RuntimeBroker.exe, syntool.exe, conhost.exe,
  211. [2018-08-19T09:27:24] DEBUG: did not find logonui.exe in session 1
  212. [2018-08-19T09:27:24] DEBUG: getting non-elevated token
  213. [2018-08-19T09:27:24] DEBUG: duplicated, new token: 1044
  214. [2018-08-19T09:27:24] INFO: starting new process
  215. [2018-08-19T09:27:24] INFO: drag and drop enabled
  216. [2018-08-19T09:27:24] DEBUG1: starting client
  217. [2018-08-19T09:27:24] DEBUG1: thread 0x00001c68 entry
  218. [2018-08-19T09:27:24] DEBUG: screen shape: 0,0 1920x1080
  219. [2018-08-19T09:27:24] DEBUG: window is 0x00480546
  220. [2018-08-19T09:27:24] DEBUG: using desktop for drop target: C:\Users\carsy\OneDrive\Desktop
  221. [2018-08-19T09:27:24] DEBUG: adopting new buffer
  222. [2018-08-19T09:27:24] DEBUG: opened display
  223. [2018-08-19T09:27:24] DEBUG1: registered event type IScreenEvents::error as 4
  224. [2018-08-19T09:27:24] DEBUG1: registered event type IScreenEvents::suspend as 5
  225. [2018-08-19T09:27:24] DEBUG1: registered event type IScreenEvents::resume as 6
  226. [2018-08-19T09:27:24] DEBUG1: registered event type FileEvents::fileChunkSending as 7
  227. [2018-08-19T09:27:24] DEBUG1: registered event type FileEvents::fileRecieveCompleted as 8
  228. [2018-08-19T09:27:24] DEBUG1: registered event type ClientEvents::connected as 9
  229. [2018-08-19T09:27:24] DEBUG1: registered event type ClientEvents::connectionFailed as 10
  230. [2018-08-19T09:27:24] DEBUG1: registered event type ClientEvents::disconnected as 11
  231. [2018-08-19T09:27:24] NOTE: started client
  232. [2018-08-19T09:27:24] NOTE: connecting to '192.168.0.10': 192.168.0.10:24800
  233. [2018-08-19T09:27:24] DEBUG1: connecting to server
  234. [2018-08-19T09:27:24] DEBUG1: registered event type IDataSocketEvents::connected as 12
  235. [2018-08-19T09:27:24] DEBUG1: registered event type IDataSocketEvents::connectionFailed as 13
  236. [2018-08-19T09:27:24] DEBUG1: registered event type IStreamEvents::inputReady as 14
  237. [2018-08-19T09:27:24] DEBUG1: registered event type IpcServerProxyEvents::messageReceived as 15
  238. [2018-08-19T09:27:24] DEBUG1: registered event type IpcClientEvents::messageReceived as 16
  239. [2018-08-19T09:27:24] DEBUG: event queue is ready
  240. [2018-08-19T09:27:24] DEBUG: add pending events to buffer
  241. [2018-08-19T09:27:24] DEBUG: accepted ipc client connection
  242. [2018-08-19T09:27:24] DEBUG1: registered event type IpcClientEvents::connected as 17
  243. [2018-08-19T09:27:24] DEBUG1: registered event type IStreamEvents::outputFlushed as 18
  244. [2018-08-19T09:27:24] DEBUG: start ipc handle data
  245. [2018-08-19T09:27:24] DEBUG: ipc read: IHEL
  246. [2018-08-19T09:27:24] DEBUG: finished ipc handle data
  247. [2018-08-19T09:27:24] DEBUG: ipc hello, type=node
  248. [2018-08-19T09:27:24] INFO: watchdog status: ok
  249. [2018-08-19T09:27:24] DEBUG1: registered event type IStreamEvents::inputShutdown as 19
  250. [2018-08-19T09:27:24] DEBUG1: connected; wait for hello
  251. [2018-08-19T09:27:24] DEBUG1: registered event type ISocketEvents::disconnected as 20
  252. [2018-08-19T09:27:24] DEBUG1: registered event type IStreamEvents::outputError as 21
  253. [2018-08-19T09:27:24] DEBUG1: registered event type IStreamEvents::outputShutdown as 22
  254. [2018-08-19T09:27:24] DEBUG1: registered event type ISocketEvents::stopRetry as 23
  255. [2018-08-19T09:27:24] DEBUG1: got hello version 1.6
  256. [2018-08-19T09:27:24] DEBUG1: say hello version 1.6
  257. [2018-08-19T09:27:24] DEBUG1: registered event type ClipboardEvents::clipboardSending as 24
  258. [2018-08-19T09:27:24] DEBUG1: registered event type IScreenEvents::shapeChanged as 25
  259. [2018-08-19T09:27:24] DEBUG1: registered event type ClipboardEvents::clipboardGrabbed as 26
  260. [2018-08-19T09:27:24] DEBUG1: sending info shape=0,0 1920x1080
  261. [2018-08-19T09:27:24] DEBUG1: recv info acknowledgment
  262. [2018-08-19T09:27:24] DEBUG1: recv reset options
  263. [2018-08-19T09:27:24] DEBUG1: recv set options size=28
  264. [2018-08-19T09:27:24] DEBUG1: half-duplex caps-lock off
  265. [2018-08-19T09:27:24] DEBUG1: half-duplex num-lock off
  266. [2018-08-19T09:27:24] DEBUG1: half-duplex scroll-lock off
  267. [2018-08-19T09:27:24] DEBUG1: screen saver synchronization on
  268. [2018-08-19T09:27:24] DEBUG1: grab the foreground window
  269. [2018-08-19T09:27:24] DEBUG1: modifiers on update: 0x0000
  270. [2018-08-19T09:27:24] DEBUG: clipboard changed: synergy owned
  271. [2018-08-19T09:27:24] DEBUG1: thread 0x00004cd4 entry
  272. [2018-08-19T09:27:24] DEBUG: desk Default window is 0x00380156
  273. [2018-08-19T09:27:24] DEBUG: switched to desk "Default"
  274. [2018-08-19T09:27:24] DEBUG: desktop is now accessible
  275. [2018-08-19T09:27:24] DEBUG1: modifiers on update: 0x0000
  276. [2018-08-19T09:27:24] DEBUG1: modifiers on update: 0x0000
  277. [2018-08-19T09:27:24] DEBUG: open clipboard
  278. [2018-08-19T09:27:24] DEBUG: empty clipboard
  279. [2018-08-19T09:27:24] DEBUG: close clipboard
  280. [2018-08-19T09:27:24] DEBUG: open clipboard
  281. [2018-08-19T09:27:24] DEBUG: empty clipboard
  282. [2018-08-19T09:27:24] DEBUG: close clipboard
  283. [2018-08-19T09:27:24] NOTE: connected to server
  284. [2018-08-19T09:27:25] DEBUG: started process, session=1, elevated: no, command="C:/Program Files/Synergy/synergyc.exe" -f --no-tray --debug DEBUG1 --name LAPTOP-V7AFSCDG --ipc --stop-on-desk-switch --enable-drag-drop --profile-dir "C:\Users\carsy\AppData\Local" 192.168.0.10:24800
  285. [2018-08-19T09:27:26] DEBUG1: recv enter, 1919,728 1 0000
  286. [2018-08-19T09:27:26] INFO: entering screen
  287. [2018-08-19T09:27:26] DEBUG: start receiving clipboard data
  288. [2018-08-19T09:27:26] DEBUG: receiving clipboard 0 size=41
  289. [2018-08-19T09:27:26] DEBUG: received clipboard 0 size=41
  290. [2018-08-19T09:27:26] DEBUG: open clipboard
  291. [2018-08-19T09:27:26] DEBUG: empty clipboard
  292. [2018-08-19T09:27:26] DEBUG: add 29 bytes to clipboard format: 0
  293. [2018-08-19T09:27:26] DEBUG: close clipboard
  294. [2018-08-19T09:27:26] INFO: clipboard was updated
  295. [2018-08-19T09:27:26] DEBUG: start receiving clipboard data
  296. [2018-08-19T09:27:26] DEBUG: receiving clipboard 1 size=41
  297. [2018-08-19T09:27:26] DEBUG: received clipboard 1 size=41
  298. [2018-08-19T09:27:26] DEBUG: open clipboard
  299. [2018-08-19T09:27:26] DEBUG: empty clipboard
  300. [2018-08-19T09:27:26] DEBUG: add 29 bytes to clipboard format: 0
  301. [2018-08-19T09:27:26] DEBUG: close clipboard
  302. [2018-08-19T09:27:26] INFO: clipboard was updated
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement