Guest User

Untitled

a guest
Mar 5th, 2019
372
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.49 KB | None | 0 0
  1. "Time of Day","Process Name","PID","Operation","Path","Result","Detail"
  2. "14:14:38,9015269","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  3. "14:14:38,9026867","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  4. "14:14:38,9027565","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  5. "14:14:38,9028191","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  6. "14:14:38,9028874","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  7. "14:14:38,9028973","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  8. "14:14:38,9038310","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  9. "14:14:38,9038832","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  10. "14:14:38,9039335","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  11. "14:14:38,9039424","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  12. "14:14:38,9081909","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  13. "14:14:38,9082604","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  14. "14:14:38,9082771","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  15. "14:14:38,9082855","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  16. "14:14:38,9083134","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  17. "14:14:38,9083468","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  18. "14:14:38,9085048","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  19. "14:14:38,9085746","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 512, Priority: Normal"
  20. "14:14:38,9086035","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  21. "14:14:38,9143160","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  22. "14:14:38,9143848","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 4 096, Priority: Normal"
  23. "14:14:38,9144063","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  24. "14:14:38,9156173","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  25. "14:14:38,9156756","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  26. "14:14:38,9157284","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 208, Priority: Normal"
  27. "14:14:38,9157421","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  28. "14:14:38,9167759","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  29. "14:14:38,9171761","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  30. "14:14:38,9172805","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  31. "14:14:38,9173385","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  32. "14:14:38,9173971","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  33. "14:14:38,9174506","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  34. "14:14:38,9174589","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  35. "14:14:38,9175512","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  36. "14:14:38,9175984","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  37. "14:14:38,9176078","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  38. "14:14:38,9176152","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  39. "14:14:38,9177438","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  40. "14:14:38,9177949","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  41. "14:14:38,9178090","mage.exe","19384","CreateFileMapping","D:\SignTest\code.test.pfx","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE_READ|PAGE_NOCACHE"
  42. "14:14:38,9178163","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  43. "14:14:38,9178406","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  44. "14:14:38,9178679","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  45. "14:14:38,9179961","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  46. "14:14:38,9180476","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 512, Priority: Normal"
  47. "14:14:38,9180660","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  48. "14:14:38,9182003","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  49. "14:14:38,9182502","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 4 096, Priority: Normal"
  50. "14:14:38,9182668","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  51. "14:14:38,9183411","mage.exe","19384","QueryOpen","D:\SignTest\code.test.pfx","SUCCESS","CreationTime: 05.03.2019 14:05:26, LastAccessTime: 05.03.2019 14:05:26, LastWriteTime: 06.02.2019 18:55:33, ChangeTime: 05.03.2019 14:05:44, AllocationSize: 8 192, EndOfFile: 6 825, FileAttributes: A"
  52. "14:14:38,9183973","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  53. "14:14:38,9184438","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 208, Priority: Normal"
  54. "14:14:38,9184560","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  55. "14:14:38,9184955","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  56. "14:14:38,9185288","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
  57. "14:14:38,9185999","mage.exe","19384","CreateFile","D:\SignTest\code.test.pfx","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  58. "14:14:38,9186447","mage.exe","19384","QueryStandardInformationFile","D:\SignTest\code.test.pfx","SUCCESS","AllocationSize: 8 192, EndOfFile: 6 825, NumberOfLinks: 1, DeletePending: False, Directory: False"
  59. "14:14:38,9186548","mage.exe","19384","ReadFile","D:\SignTest\code.test.pfx","SUCCESS","Offset: 0, Length: 6 825, Priority: Normal"
  60. "14:14:38,9186691","mage.exe","19384","CloseFile","D:\SignTest\code.test.pfx","SUCCESS",""
Advertisement
Add Comment
Please, Sign In to add comment