79 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NTDLL.DLL SUCCESS Options: Open Access: 00000081 80 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\NTDLL.DLL SUCCESS Length: 731648 81 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\KERNEL32.DLL SUCCESS Options: Open Access: 00000081 82 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\KERNEL32.DLL SUCCESS Length: 1063424 83 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Options: Open Access: 00000081 84 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Length: 946176 85 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\USER32.DLL SUCCESS Options: Open Access: 00000081 86 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\USER32.DLL SUCCESS Length: 580096 87 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\GDI32.DLL SUCCESS Options: Open Access: 00000081 88 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\GDI32.DLL SUCCESS Length: 286720 89 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\ADVAPI32.DLL SUCCESS Options: Open Access: 00000081 90 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\ADVAPI32.DLL SUCCESS Length: 678400 91 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RPCRT4.DLL SUCCESS Options: Open Access: 00000081 92 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RPCRT4.DLL SUCCESS Length: 584704 93 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SECUR32.DLL SUCCESS Options: Open Access: 00000081 94 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SECUR32.DLL SUCCESS Length: 56320 95 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSVCRT.DLL SUCCESS Options: Open Access: 00000081 96 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSVCRT.DLL SUCCESS Length: 343040 97 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Options: Open Access: 00000081 98 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Length: 617472 99 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHLWAPI.DLL SUCCESS Options: Open Access: 00000081 100 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SHLWAPI.DLL SUCCESS Length: 474624 101 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLEAUT32.DLL SUCCESS Options: Open Access: 00000081 102 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\OLEAUT32.DLL SUCCESS Length: 551936 103 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLE32.DLL SUCCESS Options: Open Access: 00000081 104 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\OLE32.DLL SUCCESS Length: 1287680 105 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Options: Open Access: 00000081 106 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Length: 1009152 107 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Options: Open Access: 00000081 108 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Length: 24576 109 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WS2_32.DLL SUCCESS Options: Open Access: 00000081 110 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WS2_32.DLL SUCCESS Length: 82432 111 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WS2HELP.DLL SUCCESS Options: Open Access: 00000081 112 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WS2HELP.DLL SUCCESS Length: 19968 113 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCR90.DLL SUCCESS Options: Open Access: 00000081 114 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCR90.DLL SUCCESS Length: 655872 115 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Options: Open Access: 00000081 116 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Length: 1093120 117 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Options: Open Access: 00000081 118 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Length: 11361792 119 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMDLG32.DLL SUCCESS Options: Open Access: 00000081 120 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\COMDLG32.DLL SUCCESS Length: 281600 121 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHELL32.DLL SUCCESS Options: Open Access: 00000081 122 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SHELL32.DLL SUCCESS Length: 8502272 123 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Options: Open Access: 00000081 124 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Length: 126976 125 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WINMM.DLL SUCCESS Options: Open Access: 00000081 126 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WINMM.DLL SUCCESS Length: 178176 127 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\VERSION.DLL SUCCESS Options: Open Access: 00000081 128 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\VERSION.DLL SUCCESS Length: 18944 129 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IMM32.DLL SUCCESS Options: Open Access: 00000081 130 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\IMM32.DLL SUCCESS Length: 110080 131 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.5512_X-WW_35D4CE83\COMCTL32.DLL SUCCESS Options: Open Access: 00000081 132 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.5512_X-WW_35D4CE83\COMCTL32.DLL SUCCESS Length: 1054208 133 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\LOGISHRD\LVMVFM\LVPRCINJ.DLL SUCCESS Options: Open Access: 00000081 134 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\LOGISHRD\LVMVFM\LVPRCINJ.DLL SUCCESS Length: 109080 135 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\UXTHEME.DLL SUCCESS Options: Open Access: 00000081 136 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\UXTHEME.DLL SUCCESS Length: 219136 137 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSIMG32.DLL SUCCESS Options: Open Access: 00000081 138 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSIMG32.DLL SUCCESS Length: 4608 139 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RPCSS.DLL SUCCESS Options: Open Access: 00000081 140 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RPCSS.DLL SUCCESS Length: 399360 141 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSCTF.DLL SUCCESS Options: Open Access: 00000081 142 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSCTF.DLL SUCCESS Length: 297984 143 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Options: Open Access: 00000081 144 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Length: 94208 145 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SETUPAPI.DLL SUCCESS Options: Open Access: 00000081 146 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SETUPAPI.DLL SUCCESS Length: 989696 147 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Options: Open Access: 00000081 148 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Length: 348160 149 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CLBCATQ.DLL SUCCESS Options: Open Access: 00000081 150 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\CLBCATQ.DLL SUCCESS Length: 498688 151 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMRES.DLL SUCCESS Options: Open Access: 00000081 152 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\COMRES.DLL SUCCESS Length: 846848 153 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Options: Open Access: 00000081 154 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Length: 6066688 155 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Options: Open Access: 00000081 156 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Length: 23040 157 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IERTUTIL.DLL SUCCESS Options: Open Access: 00000081 158 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\IERTUTIL.DLL SUCCESS Length: 267776 159 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WININET.DLL SUCCESS Options: Open Access: 00000081 160 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WININET.DLL SUCCESS Length: 826368 161 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NORMALIZ.DLL SUCCESS Options: Open Access: 00000081 162 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\NORMALIZ.DLL SUCCESS Length: 23552 163 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\APPHELP.DLL SUCCESS Options: Open Access: 00000081 164 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\APPHELP.DLL SUCCESS Length: 125952 165 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Options: Open Access: 00000081 166 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Length: 715776 167 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Options: Open Access: 00000081 168 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Length: 1160192 169 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\XPSP3RES.DLL SUCCESS Options: Open Access: 00000081 170 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\XPSP3RES.DLL SUCCESS Length: 779776 171 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\DE-DE\IEFRAME.DLL.MUI SUCCESS Options: Open Access: 00000081 172 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\DE-DE\IEFRAME.DLL.MUI SUCCESS Length: 1040384 173 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Options: Open Access: 00000081 174 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Length: 3594752 175 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Options: Open Access: 00000081 176 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Length: 156160 177 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\MICROSOFT OFFICE\OFFICE11\OUTLLIB.DLL SUCCESS Options: Open Access: 00000081 178 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\MICROSOFT OFFICE\OFFICE11\OUTLLIB.DLL SUCCESS Length: 7613280 179 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Options: Open Access: 00000081 180 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Length: 237056 181 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Options: Open Access: 00000081 182 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Length: 61440 183 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NETAPI32.DLL SUCCESS Options: Open Access: 00000081 184 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\NETAPI32.DLL SUCCESS Length: 337408 185 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Options: Open Access: 00000081 186 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Length: 181760 187 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Options: Open Access: 00000081 188 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Length: 44032 189 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\USERENV.DLL SUCCESS Options: Open Access: 00000081 190 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\USERENV.DLL SUCCESS Length: 736768 191 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Options: Open Access: 00000081 192 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Length: 132608 193 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Options: Open Access: 00000081 194 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Length: 95744 195 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Options: Open Access: 00000081 196 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Length: 208384 197 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CRYPT32.DLL SUCCESS Options: Open Access: 00000081 198 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\CRYPT32.DLL SUCCESS Length: 604160 199 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Options: Open Access: 00000081 200 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Length: 7168 201 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Options: Open Access: 00000081 202 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Length: 180224 203 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Options: Open Access: 00000081 204 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Length: 24576 205 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\XPSP2RES.DLL SUCCESS Options: Open Access: 00000081 206 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\XPSP2RES.DLL SUCCESS Length: 2981888 207 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Options: Open Access: 00000081 208 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Length: 159232 209 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Options: Open Access: 00000081 210 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Length: 586240 211 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\TORTOISEOVERLAYS\TORTOISEOVERLAYS.DLL SUCCESS Options: Open Access: 00000081 212 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\TORTOISEOVERLAYS\TORTOISEOVERLAYS.DLL SUCCESS Length: 80384 213 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESTUB.DLL SUCCESS Options: Open Access: 00000081 214 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESTUB.DLL SUCCESS Length: 44032 215 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESVN.DLL SUCCESS Options: Open Access: 00000081 216 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESVN.DLL SUCCESS Length: 745472 217 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\LIBAPR_TSVN.DLL SUCCESS Options: Open Access: 00000081 218 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\TORTOISESVN\BIN\LIBAPR_TSVN.DLL SUCCESS Length: 118272 219 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSWSOCK.DLL SUCCESS Options: Open Access: 00000081 220 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSWSOCK.DLL SUCCESS Length: 247296 221 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\LIBAPRUTIL_TSVN.DLL SUCCESS Options: Open Access: 00000081 222 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\TORTOISESVN\BIN\LIBAPRUTIL_TSVN.DLL SUCCESS Length: 157184 223 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WLDAP32.DLL SUCCESS Options: Open Access: 00000081 224 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\WLDAP32.DLL SUCCESS Length: 173056 225 10:26:35 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\INTL3_TSVN.DLL SUCCESS Options: Open Access: 00000081 226 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\TORTOISESVN\BIN\INTL3_TSVN.DLL SUCCESS Length: 57856 227 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCP90.DLL SUCCESS Options: Open Access: 00000081 228 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCP90.DLL SUCCESS Length: 572928 229 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHFOLDER.DLL SUCCESS Options: Open Access: 00000081 230 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\SHFOLDER.DLL SUCCESS Length: 25088 231 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CSCUI.DLL SUCCESS Options: Open Access: 00000081 232 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\CSCUI.DLL SUCCESS Length: 334848 233 10:26:35 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CSCDLL.DLL SUCCESS Options: Open Access: 00000081 234 10:26:35 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\CSCDLL.DLL SUCCESS Length: 102912 235 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 0 Length: 4096 236 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Offset: 0 Length: 4096 237 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Offset: 471040 Length: 20480 238 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 0 Length: 4096 239 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Offset: 0 Length: 4096 240 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WS2_32.DLL SUCCESS Offset: 0 Length: 4096 241 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WS2HELP.DLL SUCCESS Offset: 0 Length: 4096 242 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCR90.DLL SUCCESS Offset: 0 Length: 4096 243 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 0 Length: 4096 244 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Offset: 0 Length: 4096 245 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SHELL32.DLL SUCCESS Offset: 2215936 Length: 4096 246 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SHELL32.DLL SUCCESS Offset: 4014080 Length: 81920 247 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Offset: 0 Length: 4096 248 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 0 Length: 4096 249 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SETUPAPI.DLL SUCCESS Offset: 0 Length: 4096 250 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 0 Length: 4096 251 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 0 Length: 4096 252 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 2510848 Length: 73728 253 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Offset: 0 Length: 4096 254 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IERTUTIL.DLL SUCCESS Offset: 0 Length: 4096 255 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WININET.DLL SUCCESS Offset: 0 Length: 4096 256 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\NORMALIZ.DLL SUCCESS Offset: 0 Length: 4096 257 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\APPHELP.DLL SUCCESS Offset: 0 Length: 4096 258 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Offset: 0 Length: 4096 259 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Offset: 0 Length: 4096 260 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\XPSP3RES.DLL SUCCESS Offset: 0 Length: 12288 261 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\XPSP3RES.DLL SUCCESS Offset: 217088 Length: 4096 262 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\DE-DE\IEFRAME.DLL.MUI SUCCESS Offset: 0 Length: 286720 263 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 0 Length: 4096 264 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 0 Length: 4096 265 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\MICROSOFT OFFICE\OFFICE11\OUTLLIB.DLL SUCCESS Offset: 0 Length: 4096 266 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\MICROSOFT OFFICE\OFFICE11\OUTLLIB.DLL SUCCESS Offset: 7258112 Length: 16384 267 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Offset: 0 Length: 4096 268 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Offset: 0 Length: 4096 269 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 0 Length: 4096 270 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 172032 Length: 4096 271 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Offset: 0 Length: 4096 272 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Offset: 0 Length: 4096 273 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Offset: 0 Length: 4096 274 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Offset: 0 Length: 208896 275 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\CRYPT32.DLL SUCCESS Offset: 0 Length: 4096 276 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\CRYPT32.DLL SUCCESS Offset: 548864 Length: 24576 277 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Offset: 0 Length: 4096 278 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Offset: 0 Length: 4096 279 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Offset: 0 Length: 4096 280 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\XPSP2RES.DLL SUCCESS Offset: 0 Length: 4096 281 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Offset: 0 Length: 4096 282 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Offset: 151552 Length: 24576 283 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\TORTOISESVN\BIN\LIBAPR_TSVN.DLL SUCCESS Offset: 0 Length: 4096 284 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSWSOCK.DLL SUCCESS Offset: 0 Length: 4096 285 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\TORTOISESVN\BIN\LIBAPRUTIL_TSVN.DLL SUCCESS Offset: 0 Length: 4096 286 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WLDAP32.DLL SUCCESS Offset: 0 Length: 4096 287 10:26:35 FTK Imager.exe:6196 READ C:\PROGRAMME\TORTOISESVN\BIN\INTL3_TSVN.DLL SUCCESS Offset: 0 Length: 4096 288 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCP90.DLL SUCCESS Offset: 0 Length: 4096 289 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SHFOLDER.DLL SUCCESS Offset: 0 Length: 4096 290 10:26:35 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\CSCDLL.DLL SUCCESS Offset: 0 Length: 4096 291 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NTDLL.DLL SUCCESS Options: Open Access: Execute 292 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\KERNEL32.DLL SUCCESS Options: Open Access: Execute 293 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Options: Open Access: Execute 294 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Length: 946176 295 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\USER32.DLL SUCCESS Options: Open Access: Execute 296 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\GDI32.DLL SUCCESS Options: Open Access: Execute 297 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\ADVAPI32.DLL SUCCESS Options: Open Access: Execute 298 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RPCRT4.DLL SUCCESS Options: Open Access: Execute 299 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SECUR32.DLL SUCCESS Options: Open Access: Execute 300 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSVCRT.DLL SUCCESS Options: Open Access: Execute 301 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Options: Open Access: Execute 302 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHLWAPI.DLL SUCCESS Options: Open Access: Execute 303 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLEAUT32.DLL SUCCESS Options: Open Access: Execute 304 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLE32.DLL SUCCESS Options: Open Access: Execute 305 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Options: Open Access: Execute 306 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Length: 1009152 307 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Options: Open Access: Execute 308 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WS2_32.DLL SUCCESS Options: Open Access: Execute 309 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WS2HELP.DLL SUCCESS Options: Open Access: Execute 310 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCR90.DLL SUCCESS Options: Open Access: Execute 311 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Options: Open Access: Execute 312 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Length: 1093120 313 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Options: Open Access: Execute 314 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Length: 11361792 315 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMDLG32.DLL SUCCESS Options: Open Access: Execute 316 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHELL32.DLL SUCCESS Options: Open Access: Execute 317 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Options: Open Access: Execute 318 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Length: 126976 319 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WINMM.DLL SUCCESS Options: Open Access: Execute 320 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\VERSION.DLL SUCCESS Options: Open Access: Execute 321 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IMM32.DLL SUCCESS Options: Open Access: Execute 322 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.5512_X-WW_35D4CE83\COMCTL32.DLL SUCCESS Options: Open Access: Execute 323 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\LOGISHRD\LVMVFM\LVPRCINJ.DLL SUCCESS Options: Open Access: Execute 324 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\UXTHEME.DLL SUCCESS Options: Open Access: Execute 325 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSIMG32.DLL SUCCESS Options: Open Access: Execute 326 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSCTF.DLL SUCCESS Options: Open Access: Execute 327 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Options: Open Access: Execute 328 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Length: 94208 329 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SETUPAPI.DLL SUCCESS Options: Open Access: Execute 330 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Options: Open Access: Execute 331 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Length: 348160 332 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CLBCATQ.DLL SUCCESS Options: Open Access: Execute 333 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\COMRES.DLL SUCCESS Options: Open Access: Execute 334 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Options: Open Access: Execute 335 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Options: Open Access: Execute 336 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IERTUTIL.DLL SUCCESS Options: Open Access: Execute 337 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WININET.DLL SUCCESS Options: Open Access: Execute 338 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NORMALIZ.DLL SUCCESS Options: Open Access: Execute 339 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\APPHELP.DLL SUCCESS Options: Open Access: Execute 340 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Options: Open Access: Execute 341 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Options: Open Access: Execute 342 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Options: Open Access: Execute 343 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Length: 3594752 344 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Options: Open Access: Execute 345 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Length: 156160 346 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Options: Open Access: Execute 347 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Options: Open Access: Execute 348 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\NETAPI32.DLL SUCCESS Options: Open Access: Execute 349 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Options: Open Access: Execute 350 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Options: Open Access: Execute 351 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\USERENV.DLL SUCCESS Options: Open Access: Execute 352 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Options: Open Access: Execute 353 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Options: Open Access: Execute 354 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Options: Open Access: Execute 355 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Options: Open Access: Execute 356 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Options: Open Access: Execute 357 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Length: 180224 358 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Options: Open Access: Execute 359 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Length: 24576 360 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\XPSP2RES.DLL SUCCESS Options: Open Access: Execute 361 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Options: Open Access: Execute 362 10:26:36 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Length: 159232 363 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Options: Open Access: Execute 364 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\GEMEINSAME DATEIEN\TORTOISEOVERLAYS\TORTOISEOVERLAYS.DLL SUCCESS Options: Open Access: Execute 365 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESTUB.DLL SUCCESS Options: Open Access: Execute 366 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\TORTOISESVN.DLL SUCCESS Options: Open Access: Execute 367 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\LIBAPR_TSVN.DLL SUCCESS Options: Open Access: Execute 368 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\MSWSOCK.DLL SUCCESS Options: Open Access: Execute 369 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\LIBAPRUTIL_TSVN.DLL SUCCESS Options: Open Access: Execute 370 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\WLDAP32.DLL SUCCESS Options: Open Access: Execute 371 10:26:36 FTK Imager.exe:6196 OPEN C:\PROGRAMME\TORTOISESVN\BIN\INTL3_TSVN.DLL SUCCESS Options: Open Access: Execute 372 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.CRT_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_6F74963E\MSVCP90.DLL SUCCESS Options: Open Access: Execute 373 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\SHFOLDER.DLL SUCCESS Options: Open Access: Execute 374 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CSCUI.DLL SUCCESS Options: Open Access: Execute 375 10:26:36 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\CSCDLL.DLL SUCCESS Options: Open Access: Execute 376 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\KERNEL32.DLL SUCCESS Offset: 279552 Length: 4096 377 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 4096 Length: 4096 378 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 552960 Length: 114688 379 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 667648 Length: 4096 380 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 823296 Length: 65536 381 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 888832 Length: 20480 382 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 909312 Length: 4096 383 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\USER32.DLL SUCCESS Offset: 197632 Length: 163840 384 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\GDI32.DLL SUCCESS Offset: 123904 Length: 24576 385 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\ADVAPI32.DLL SUCCESS Offset: 226304 Length: 4096 386 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\ADVAPI32.DLL SUCCESS Offset: 414720 Length: 12288 387 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RPCRT4.DLL SUCCESS Offset: 222208 Length: 167936 388 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Offset: 1024 Length: 458752 389 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Offset: 462848 Length: 9728 390 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\COMCTL32.DLL SUCCESS Offset: 472576 Length: 4096 391 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SHLWAPI.DLL SUCCESS Offset: 144384 Length: 151552 392 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEAUT32.DLL SUCCESS Offset: 238592 Length: 4096 393 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLE32.DLL SUCCESS Offset: 222208 Length: 4096 394 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLE32.DLL SUCCESS Offset: 467968 Length: 4096 395 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 1024 Length: 659456 396 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 663040 Length: 192512 397 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 909824 Length: 55808 398 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 965632 Length: 2048 399 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\LIBEAY32.DLL SUCCESS Offset: 967680 Length: 40960 400 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Offset: 1024 Length: 8192 401 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Offset: 10240 Length: 512 402 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WSOCK32.DLL SUCCESS Offset: 10752 Length: 4096 403 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 656384 Length: 8192 404 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 673280 Length: 4096 405 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 960000 Length: 98304 406 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 1065984 Length: 3072 407 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUUC38.DLL SUCCESS Offset: 1069056 Length: 2048 408 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Offset: 11359232 Length: 1024 409 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\ICUDT38.DLL SUCCESS Offset: 11360256 Length: 1536 410 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Offset: 1024 Length: 75776 411 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Offset: 76800 Length: 512 412 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Offset: 77312 Length: 12288 413 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\UXTHEME.DLL SUCCESS Offset: 173056 Length: 4096 414 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSCTF.DLL SUCCESS Offset: 37888 Length: 217088 415 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 4096 Length: 45056 416 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 49152 Length: 28672 417 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 77824 Length: 4096 418 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 81920 Length: 4096 419 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MD5REMOTE.DLL SUCCESS Offset: 86016 Length: 8192 420 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 4096 Length: 212992 421 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 237568 Length: 69632 422 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 307200 Length: 20480 423 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 331776 Length: 4096 424 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 1024 Length: 299008 425 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 435200 Length: 1077248 426 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 1934336 Length: 98304 427 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 2413568 Length: 30208 428 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 2443776 Length: 69632 429 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 2530816 Length: 24576 430 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 2760192 Length: 131072 431 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 3104256 Length: 36864 432 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 3706368 Length: 241664 433 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IEFRAME.DLL SUCCESS Offset: 5946880 Length: 1536 434 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Offset: 17408 Length: 3584 435 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\PSAPI.DLL SUCCESS Offset: 20992 Length: 1024 436 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IERTUTIL.DLL SUCCESS Offset: 9216 Length: 4096 437 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\WININET.DLL SUCCESS Offset: 37888 Length: 8192 438 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Offset: 291840 Length: 4096 439 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Offset: 627200 Length: 8192 440 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SXS.DLL SUCCESS Offset: 637440 Length: 4096 441 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Offset: 1024 Length: 380928 442 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Offset: 574464 Length: 148992 443 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Offset: 728064 Length: 24576 444 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\URLMON.DLL SUCCESS Offset: 753664 Length: 8192 445 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1024 Length: 2318336 446 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 2495488 Length: 77824 447 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 2937856 Length: 4096 448 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 3113984 Length: 59392 449 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 3173376 Length: 46592 450 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 3219968 Length: 4096 451 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 1024 Length: 151552 452 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 152576 Length: 1024 453 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 153600 Length: 1536 454 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 155136 Length: 1024 455 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Offset: 1024 Length: 4096 456 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Offset: 218112 Length: 3072 457 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Offset: 221184 Length: 1024 458 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASAPI32.DLL SUCCESS Offset: 222208 Length: 3584 459 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Offset: 1024 Length: 55808 460 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Offset: 56832 Length: 512 461 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RASMAN.DLL SUCCESS Offset: 57344 Length: 1024 462 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 1024 Length: 4096 463 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 156672 Length: 13824 464 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 170496 Length: 1536 465 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\TAPI32.DLL SUCCESS Offset: 172032 Length: 2048 466 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Offset: 1024 Length: 38912 467 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Offset: 39936 Length: 512 468 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RTUTILS.DLL SUCCESS Offset: 40448 Length: 1024 469 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Offset: 1024 Length: 117248 470 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Offset: 118272 Length: 4608 471 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSV1_0.DLL SUCCESS Offset: 122880 Length: 4096 472 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Offset: 1024 Length: 4096 473 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Offset: 78336 Length: 4096 474 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL SUCCESS Offset: 82432 Length: 8192 475 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Offset: 1024 Length: 118784 476 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Offset: 197120 Length: 2560 477 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\RSAENH.DLL SUCCESS Offset: 199680 Length: 3584 478 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Offset: 1024 Length: 4096 479 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Offset: 5120 Length: 512 480 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\SENSAPI.DLL SUCCESS Offset: 5632 Length: 1024 481 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Offset: 4096 Length: 147456 482 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Offset: 151552 Length: 4096 483 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Offset: 163840 Length: 4096 484 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\1031\MDMUI.DLL SUCCESS Offset: 4096 Length: 12288 485 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\XPSP2RES.DLL SUCCESS Offset: 2445824 Length: 4096 486 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Offset: 1024 Length: 149504 487 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Offset: 150528 Length: 512 488 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSIMTF.DLL SUCCESS Offset: 151040 Length: 1536 489 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Offset: 1024 Length: 135168 490 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Offset: 136192 Length: 8192 491 10:26:36 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MLANG.DLL SUCCESS Offset: 154624 Length: 4096 492 10:26:36 FTK Imager.exe:6196 READ C:\PROGRAMME\TORTOISESVN\BIN\INTL3_TSVN.DLL SUCCESS Offset: 54784 Length: 3072 493 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximage.dll SUCCESS Attributes: A 494 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\cximage.dll SUCCESS Options: Open Access: 00100020 495 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\cximage.dll SUCCESS 496 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\LIBEAY32.dll SUCCESS Attributes: A 497 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\LIBEAY32.dll SUCCESS Options: Open Access: 00100020 498 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\LIBEAY32.dll SUCCESS 499 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\LIBEAY32.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 500 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\LIBEAY32.dll.2.Config NOT FOUND Options: Open Access: 001200A9 503 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\WSOCK32.dll NOT FOUND Attributes: Error 504 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\WSOCK32.dll SUCCESS Attributes: A 505 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WSOCK32.dll SUCCESS Options: Open Access: 00100020 506 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\WSOCK32.dll SUCCESS 507 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\WS2_32.dll NOT FOUND Attributes: Error 508 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\WS2_32.dll SUCCESS Attributes: A 509 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WS2_32.dll SUCCESS Options: Open Access: 00100020 510 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\WS2_32.dll SUCCESS 511 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\WS2HELP.dll NOT FOUND Attributes: Error 512 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\WS2HELP.dll SUCCESS Attributes: A 513 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WS2HELP.dll SUCCESS Options: Open Access: 00100020 514 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\WS2HELP.dll SUCCESS 515 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCR90.dll SUCCESS Options: Open Access: 00100020 516 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCR90.dll SUCCESS 517 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\icuuc38.dll SUCCESS Attributes: A 518 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\icuuc38.dll SUCCESS Options: Open Access: 00100020 519 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\icuuc38.dll SUCCESS 520 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\icuuc38.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 521 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\icuuc38.dll.2.Config NOT FOUND Options: Open Access: 001200A9 524 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\icudt38.dll SUCCESS Attributes: A 525 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\icudt38.dll SUCCESS Options: Open Access: 00100020 526 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\icudt38.dll SUCCESS 527 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\oledlg.dll NOT FOUND Attributes: Error 528 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\oledlg.dll SUCCESS Attributes: A 529 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\oledlg.dll SUCCESS Options: Open Access: 00100020 530 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\oledlg.dll SUCCESS 531 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\WINMM.dll NOT FOUND Attributes: Error 532 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\WINMM.dll SUCCESS Attributes: A 533 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WINMM.dll SUCCESS Options: Open Access: 00100020 534 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\WINMM.dll SUCCESS 535 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 536 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\IMM32.DLL SUCCESS Options: Open Access: 00100020 537 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Length: 110080 538 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\IMM32.DLL SUCCESS 539 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 540 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\IMM32.DLL SUCCESS Options: Open Access: 00100020 541 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Length: 110080 542 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\IMM32.DLL SUCCESS 543 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 544 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\IMM32.DLL SUCCESS Options: Open Access: 00100020 545 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\IMM32.DLL SUCCESS 546 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 547 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 548 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\COMCTL32.dll SUCCESS Options: Open Access: 001200A9 549 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\COMCTL32.dll SUCCESS Length: 617472 550 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\COMCTL32.dll.124.Manifest NOT FOUND Options: Open Access: 001200A9 551 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\COMCTL32.dll.124.Config NOT FOUND Options: Open Access: 001200A9 552 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\COMCTL32.dll SUCCESS 553 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 554 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 555 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 556 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 557 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 558 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 559 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 560 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageDEU.dll NOT FOUND Attributes: Error 561 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageLOC.dll NOT FOUND Attributes: Error 562 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\cximageLOC.dll NOT FOUND Attributes: Error 563 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCR90.dll SUCCESS Attributes: A 565 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 001200A9 566 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 567 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll.124.Manifest NOT FOUND Options: Open Access: 001200A9 568 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll.124.Config NOT FOUND Options: Open Access: 001200A9 581 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 582 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll SUCCESS Options: Open Access: 00100020 583 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll SUCCESS Length: 1054208 584 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll SUCCESS 585 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll SUCCESS Options: Open Access: 00100020 586 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll SUCCESS 591 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Attributes: A 592 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Options: Open Access: 00100020 593 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Length: 109080 594 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS 595 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Attributes: A 596 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Attributes: A 597 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS Options: Open Access: 00100020 598 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll SUCCESS 599 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 600 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcInj.dll.2.Config NOT FOUND Options: Open Access: 001200A9 601 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 602 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\uxtheme.dll SUCCESS Options: Open Access: 00100020 603 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Length: 219136 604 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\uxtheme.dll SUCCESS 605 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 606 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\uxtheme.dll SUCCESS Options: Open Access: 00100020 607 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\uxtheme.dll SUCCESS 608 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 609 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 610 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 611 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\msimg32.dll NOT FOUND Attributes: Error 612 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msimg32.dll SUCCESS Attributes: A 613 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\msimg32.dll SUCCESS Options: Open Access: 00100020 614 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\msimg32.dll SUCCESS 615 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 616 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 617 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 618 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 619 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 620 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 621 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 622 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerDEU.dll NOT FOUND Attributes: Error 623 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerLOC.dll NOT FOUND Attributes: Error 624 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\FTK ImagerLOC.dll NOT FOUND Attributes: Error 625 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rpcss.dll SUCCESS Attributes: A 626 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rpcss.dll SUCCESS Options: Open Access: 00100020 627 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rpcss.dll SUCCESS Length: 399360 628 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rpcss.dll SUCCESS 629 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MSCTF.dll SUCCESS Attributes: A 630 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MSCTF.dll SUCCESS Options: Open Access: 00100020 631 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MSCTF.dll SUCCESS Length: 297984 632 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\MSCTF.dll SUCCESS 633 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MSCTF.dll SUCCESS Attributes: A 634 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MSCTF.dll SUCCESS Options: Open Access: 00100020 635 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\MSCTF.dll SUCCESS 636 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntdll.dll SUCCESS Attributes: A 637 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\imm32.dll SUCCESS Attributes: A 638 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\KERNEL32.dll SUCCESS Attributes: A 639 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\MD5Remote.dll SUCCESS Attributes: A 640 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\MD5Remote.dll SUCCESS Options: Open Access: 00100020 641 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\MD5Remote.dll SUCCESS 642 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\SETUPAPI.dll NOT FOUND Attributes: Error 643 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SETUPAPI.dll SUCCESS Attributes: A 644 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SETUPAPI.dll SUCCESS Options: Open Access: 00100020 645 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SETUPAPI.dll SUCCESS 646 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\MSVCR71.dll SUCCESS Attributes: A 647 10:26:38 FTK Imager.exe:6196 OPEN C:\Programme\AccessData\MSVCR71.dll SUCCESS Options: Open Access: 00100020 648 10:26:38 FTK Imager.exe:6196 CLOSE C:\Programme\AccessData\MSVCR71.dll SUCCESS 649 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ole32.dll SUCCESS Attributes: A 650 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntdll.dll SUCCESS Attributes: A 651 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\CLBCATQ.DLL NOT FOUND Attributes: Error 652 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\CLBCATQ.DLL SUCCESS Attributes: A 653 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\CLBCATQ.DLL SUCCESS Options: Open Access: 00100020 654 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\CLBCATQ.DLL SUCCESS 655 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\COMRes.dll NOT FOUND Attributes: Error 656 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\COMRes.dll SUCCESS Attributes: A 657 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\COMRes.dll SUCCESS Options: Open Access: 00100020 658 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\COMRes.dll SUCCESS 659 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 660 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ieframe.dll SUCCESS Options: Open Access: 00100020 661 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Length: 6066688 662 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ieframe.dll SUCCESS 663 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 664 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ieframe.dll SUCCESS Options: Open Access: 00100020 665 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ieframe.dll SUCCESS 666 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\PSAPI.DLL SUCCESS Attributes: A 667 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\PSAPI.DLL SUCCESS Options: Open Access: 00100020 668 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\PSAPI.DLL SUCCESS 669 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ieframe.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 670 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ieframe.dll.123.Config NOT FOUND Options: Open Access: 001200A9 683 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WININET.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 684 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\WININET.dll.123.Config NOT FOUND Options: Open Access: 001200A9 697 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\SXS.DLL NOT FOUND Attributes: Error 698 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SXS.DLL SUCCESS Attributes: A 699 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SXS.DLL SUCCESS Options: Open Access: 00100020 700 10:26:38 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SXS.DLL SUCCESS 701 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ieframe.dll SUCCESS Options: Open Access: Read 702 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 0 Length: 64 703 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 240 Length: 4 704 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 244 Length: 20 705 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 488 Length: 40 706 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 528 Length: 40 707 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 568 Length: 40 708 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514432 Length: 16 709 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514448 Length: 8 710 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2548956 Length: 2 711 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514456 Length: 8 712 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2550522 Length: 2 713 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514464 Length: 8 714 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2548528 Length: 2 715 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2548530 Length: 14 716 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514616 Length: 16 717 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2514632 Length: 8 718 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2520488 Length: 16 719 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2520504 Length: 8 720 10:26:38 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ieframe.dll SUCCESS Offset: 2537344 Length: 16 721 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Length: 6066688 722 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Length: 6066688 723 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\urlmon.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 724 10:26:38 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\urlmon.dll.123.Config NOT FOUND Options: Open Access: 001200A9 737 10:26:38 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\urlmon.dll SUCCESS Attributes: A 738 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\xpsp3res.dll NOT FOUND Attributes: Error 739 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\xpsp3res.dll SUCCESS Attributes: A 740 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\xpsp3res.dll SUCCESS Options: Open Access: Read 741 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\xpsp3res.dll SUCCESS Length: 779776 742 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\xpsp3res.dll SUCCESS 743 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\xpsp3res.dll NOT FOUND Attributes: Error 744 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\xpsp3res.dll NOT FOUND Attributes: Error 745 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\xpsp3res.dll SUCCESS Attributes: A 746 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\xpsp3res.dll SUCCESS Options: Open Access: Read 747 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\xpsp3res.dll SUCCESS Length: 779776 748 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\xpsp3res.dll SUCCESS 749 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 750 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 751 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 752 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS Options: Open Access: Read 753 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS Length: 1040384 754 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS 755 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 756 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00100020 757 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 758 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 759 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 760 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00100020 761 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 762 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msls31.dll SUCCESS Attributes: A 763 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\msls31.dll SUCCESS Options: Open Access: 00100020 764 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\msls31.dll SUCCESS 765 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Attributes: A 766 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Options: Open Access: 00100020 767 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Length: 7613280 768 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS 769 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Attributes: A 770 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Options: Open Access: Read 771 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Length: 7613280 772 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS 773 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Attributes: A 774 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Options: Open Access: 00100020 775 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Length: 7613280 776 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS 777 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Attributes: A 778 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Options: Open Access: Read 779 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS Length: 7613280 780 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\OFFICE11\outllib.dll SUCCESS 781 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\RASAPI32.dll NOT FOUND Attributes: Error 782 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\RASAPI32.dll SUCCESS Attributes: A 783 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\RASAPI32.dll SUCCESS Options: Open Access: 00100020 784 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\RASAPI32.dll SUCCESS 785 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\rasman.dll NOT FOUND Attributes: Error 786 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rasman.dll SUCCESS Attributes: A 787 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rasman.dll SUCCESS Options: Open Access: 00100020 788 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rasman.dll SUCCESS 789 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\TAPI32.dll NOT FOUND Attributes: Error 790 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\TAPI32.dll SUCCESS Attributes: A 791 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\TAPI32.dll SUCCESS Options: Open Access: 00100020 792 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\TAPI32.dll SUCCESS 793 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\rtutils.dll NOT FOUND Attributes: Error 794 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rtutils.dll SUCCESS Attributes: A 795 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rtutils.dll SUCCESS Options: Open Access: 00100020 796 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rtutils.dll SUCCESS 797 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\TAPI32.dll SUCCESS Options: Open Access: 001200A9 798 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\TAPI32.dll SUCCESS Length: 181760 799 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\TAPI32.dll.124.Manifest NOT FOUND Options: Open Access: 001200A9 800 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\TAPI32.dll.124.Config NOT FOUND Options: Open Access: 001200A9 813 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\TAPI32.dll SUCCESS 814 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\msapsspc.dll NOT FOUND Attributes: Error 815 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\msapsspc.dll NOT FOUND Attributes: Error 816 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msapsspc.dll SUCCESS Attributes: A 817 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\schannel.dll NOT FOUND Attributes: Error 818 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\schannel.dll NOT FOUND Attributes: Error 819 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\schannel.dll SUCCESS Attributes: A 820 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\digest.dll NOT FOUND Attributes: Error 821 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\digest.dll NOT FOUND Attributes: Error 822 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\digest.dll SUCCESS Attributes: A 823 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\msnsspc.dll NOT FOUND Attributes: Error 824 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\msnsspc.dll NOT FOUND Attributes: Error 825 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msnsspc.dll SUCCESS Attributes: A 826 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msv1_0.dll SUCCESS Attributes: A 827 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\msv1_0.dll SUCCESS Options: Open Access: 00100020 828 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msv1_0.dll SUCCESS Length: 132608 829 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\msv1_0.dll SUCCESS 830 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\msv1_0.dll SUCCESS Attributes: A 831 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\msv1_0.dll SUCCESS Options: Open Access: 00100020 832 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\msv1_0.dll SUCCESS 833 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\iphlpapi.dll NOT FOUND Attributes: Error 834 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\iphlpapi.dll SUCCESS Attributes: A 835 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\iphlpapi.dll SUCCESS Options: Open Access: 00100020 836 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\iphlpapi.dll SUCCESS 839 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\rsaenh.dll NOT FOUND Attributes: Error 840 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\rsaenh.dll NOT FOUND Attributes: Error 841 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 842 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: Read 843 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 208384 844 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 208384 845 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 846 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 847 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: Read 848 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 208384 849 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 0 Length: 336 850 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 340 Length: 4096 851 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 4436 Length: 4096 852 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 8532 Length: 4096 853 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 12628 Length: 4096 854 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 16724 Length: 4096 855 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 20820 Length: 4096 856 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 24916 Length: 4096 857 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 29012 Length: 4096 858 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 33108 Length: 4096 859 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 37204 Length: 4096 860 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 41300 Length: 4096 861 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 45396 Length: 4096 862 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 49492 Length: 4096 863 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 53588 Length: 4096 864 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 57684 Length: 4096 865 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 61780 Length: 4096 866 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 65876 Length: 4096 867 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 69972 Length: 4096 868 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 74068 Length: 4096 869 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 78164 Length: 4096 870 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 82260 Length: 4096 871 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 86356 Length: 4096 872 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 90452 Length: 4096 873 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 94548 Length: 4096 874 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 98644 Length: 4096 875 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 102740 Length: 4096 876 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 106836 Length: 4096 877 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 110932 Length: 4096 878 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 115028 Length: 4096 879 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 119124 Length: 4096 880 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 123220 Length: 4096 881 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 127316 Length: 4096 882 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 131412 Length: 4096 883 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 135508 Length: 4096 884 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 139604 Length: 4096 885 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 143700 Length: 4096 886 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 147796 Length: 4096 887 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 151892 Length: 4096 888 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 155988 Length: 4096 889 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 160084 Length: 4096 890 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 164180 Length: 4096 891 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 168276 Length: 4096 892 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 172372 Length: 4096 893 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 176468 Length: 4096 894 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 180564 Length: 4096 895 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 184660 Length: 4096 896 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 188756 Length: 4096 897 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 192852 Length: 4096 898 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 196948 Length: 3964 899 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 201056 Length: 4096 900 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 205152 Length: 3232 901 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 902 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\rsaenh.dll NOT FOUND Attributes: Error 903 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 904 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: 00100020 905 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 906 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\crypt32.dll NOT FOUND Attributes: Error 907 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\crypt32.dll SUCCESS Attributes: A 908 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\crypt32.dll SUCCESS Options: Open Access: Read 909 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\crypt32.dll SUCCESS Length: 604160 910 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\crypt32.dll SUCCESS 911 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 912 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: Read 913 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 914 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 208384 915 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 916 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 917 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: Read 918 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 919 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 208384 920 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 0 Length: 336 921 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 340 Length: 4096 922 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 4436 Length: 4096 923 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 8532 Length: 4096 924 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 12628 Length: 4096 925 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 16724 Length: 4096 926 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 20820 Length: 4096 927 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 24916 Length: 4096 928 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 29012 Length: 4096 929 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 33108 Length: 4096 930 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 37204 Length: 4096 931 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 41300 Length: 4096 932 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 45396 Length: 4096 933 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 49492 Length: 4096 934 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 53588 Length: 4096 935 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 57684 Length: 4096 936 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 61780 Length: 4096 937 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 65876 Length: 4096 938 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 69972 Length: 4096 939 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 74068 Length: 4096 940 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 78164 Length: 4096 941 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 82260 Length: 4096 942 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 86356 Length: 4096 943 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 90452 Length: 4096 944 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 94548 Length: 4096 945 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 98644 Length: 4096 946 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 102740 Length: 4096 947 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 106836 Length: 4096 948 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 110932 Length: 4096 949 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 115028 Length: 4096 950 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 119124 Length: 4096 951 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 123220 Length: 4096 952 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 127316 Length: 4096 953 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 131412 Length: 4096 954 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 135508 Length: 4096 955 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 139604 Length: 4096 956 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 143700 Length: 4096 957 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 147796 Length: 4096 958 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 151892 Length: 4096 959 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 155988 Length: 4096 960 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 160084 Length: 4096 961 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 164180 Length: 4096 962 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 168276 Length: 4096 963 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 172372 Length: 4096 964 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 176468 Length: 4096 965 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 180564 Length: 4096 966 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 184660 Length: 4096 967 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 188756 Length: 4096 968 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 192852 Length: 4096 969 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 196948 Length: 3964 970 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 201072 Length: 4096 971 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\rsaenh.dll SUCCESS Offset: 205168 Length: 3216 972 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 973 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\sensapi.dll NOT FOUND Attributes: Error 974 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\sensapi.dll SUCCESS Attributes: A 975 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\sensapi.dll SUCCESS Options: Open Access: 00100020 976 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\sensapi.dll SUCCESS 985 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Attributes: A 986 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Options: Open Access: 00100020 987 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Length: 180224 988 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS 989 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Attributes: A 990 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Attributes: A 991 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS Options: Open Access: 00100020 992 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\PDM.DLL SUCCESS 993 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Attributes: A 994 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Options: Open Access: 00100020 995 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Length: 24576 996 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS 997 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Attributes: A 998 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Attributes: A 999 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS Options: Open Access: 00100020 1000 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\1031\mdmui.dll SUCCESS 1001 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\ieframe.dll NOT FOUND Attributes: Error 1002 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\ieframe.dll NOT FOUND Attributes: Error 1003 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ieframe.dll SUCCESS Attributes: A 1004 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS Options: Open Access: Read 1005 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS Length: 1040384 1006 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\de-DE\ieframe.dll.mui SUCCESS 1007 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\xpsp2res.dll NOT FOUND Attributes: Error 1008 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\xpsp2res.dll SUCCESS Attributes: A 1009 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\xpsp2res.dll SUCCESS Options: Open Access: 00100020 1010 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\xpsp2res.dll SUCCESS 1011 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\urlmon.dll SUCCESS Attributes: A 1012 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1013 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\Msimtf.dll SUCCESS Options: Open Access: 00100020 1014 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Length: 159232 1015 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\Msimtf.dll SUCCESS 1016 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1017 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\Msimtf.dll SUCCESS Options: Open Access: 00100020 1018 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Length: 159232 1019 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\Msimtf.dll SUCCESS 1020 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1021 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\Msimtf.dll SUCCESS Options: Open Access: 00100020 1022 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Length: 159232 1023 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\Msimtf.dll SUCCESS 1024 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1025 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\Msimtf.dll SUCCESS Options: Open Access: 00100020 1026 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Length: 159232 1027 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\Msimtf.dll SUCCESS 1028 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\msimtf.dll SUCCESS Attributes: A 1029 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\msimtf.dll SUCCESS Options: Open Access: 00100020 1030 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\msimtf.dll SUCCESS Length: 159232 1031 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\msimtf.dll SUCCESS 1032 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\msimtf.dll SUCCESS Attributes: A 1033 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\msimtf.dll SUCCESS Options: Open Access: 00100020 1034 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\msimtf.dll SUCCESS 1035 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\imm32.dll SUCCESS Attributes: A 1036 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msctf.dll SUCCESS Attributes: A 1037 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\msctf.dll SUCCESS Attributes: A 1038 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntdll.dll SUCCESS Attributes: A 1039 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1040 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\Msimtf.dll SUCCESS Attributes: A 1041 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\imm32.dll SUCCESS Attributes: A 1042 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\MLANG.dll NOT FOUND Attributes: Error 1043 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MLANG.dll SUCCESS Attributes: A 1044 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MLANG.dll SUCCESS Options: Open Access: 00100020 1045 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\MLANG.dll SUCCESS 1046 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MLANG.dll SUCCESS Options: Open Access: 001200A9 1047 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MLANG.dll SUCCESS Length: 586240 1048 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MLANG.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 1049 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MLANG.dll.123.Config NOT FOUND Options: Open Access: 001200A9 1062 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\MLANG.dll SUCCESS 1063 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1064 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1065 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1066 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1067 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1068 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1069 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1070 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1071 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1072 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1073 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1074 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1075 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1076 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Options: Open Access: Read 1077 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1078 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Length: 80384 1079 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS 1080 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1081 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Options: Open Access: 00100020 1082 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Length: 80384 1083 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS 1084 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1085 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1086 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Options: Open Access: 00100020 1087 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS 1088 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1089 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1094 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1095 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1096 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Options: Open Access: 00100020 1097 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Length: 44032 1098 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS 1099 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1100 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1101 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Options: Open Access: 00100020 1102 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS 1103 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseStub.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1104 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseStub.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1105 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Attributes: A 1106 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Options: Open Access: 00100020 1107 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Length: 745472 1108 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS 1109 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Attributes: A 1110 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Attributes: A 1111 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS Options: Open Access: 00100020 1112 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll SUCCESS 1113 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1114 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\TortoiseSVN.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1123 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll SUCCESS Attributes: A 1124 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll SUCCESS Attributes: A 1125 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll SUCCESS Options: Open Access: 00100020 1126 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll SUCCESS 1127 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1128 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libapr_tsvn.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1131 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\MSWSOCK.dll NOT FOUND Attributes: Error 1132 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\MSWSOCK.dll SUCCESS Attributes: A 1133 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\MSWSOCK.dll SUCCESS Options: Open Access: 00100020 1134 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\MSWSOCK.dll SUCCESS 1135 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll SUCCESS Attributes: A 1136 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll SUCCESS Attributes: A 1137 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll SUCCESS Options: Open Access: 00100020 1138 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll SUCCESS 1139 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1140 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1143 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll SUCCESS Attributes: A 1144 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll SUCCESS Attributes: A 1145 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll SUCCESS Options: Open Access: 00100020 1146 10:26:39 FTK Imager.exe:6196 CLOSE C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll SUCCESS 1147 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1148 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\bin\intl3_tsvn.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1151 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCP90.dll SUCCESS Options: Open Access: 00100020 1152 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCP90.dll SUCCESS 1153 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\SHFOLDER.dll NOT FOUND Attributes: Error 1154 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHFOLDER.dll SUCCESS Attributes: A 1155 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHFOLDER.dll SUCCESS Options: Open Access: 00100020 1156 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHFOLDER.dll SUCCESS 1157 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\Languages\TortoiseProc1033.dll NOT FOUND Attributes: Error 1158 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\Languages\TortoiseProc1033.dll NOT FOUND Attributes: Error 1159 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\Languages\TortoiseProc1033.dll.DLL NOT FOUND Attributes: Error 1160 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\Languages\TortoiseProc1033.dll NOT FOUND Options: Open Access: Read 1161 10:26:39 FTK Imager.exe:6196 OPEN C:\Programme\TortoiseSVN\Languages\TortoiseProc1033.dll NOT FOUND Options: Open Access: Read 1162 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1163 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1164 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1165 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1166 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1167 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1168 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1169 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1170 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1171 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1172 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1173 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1174 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1175 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1176 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll SUCCESS Attributes: A 1177 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\TortoiseSVN\bin\TortoiseStub.dll SUCCESS Attributes: A 1178 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll SUCCESS Options: Open Access: Read 1179 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Attributes: A 1180 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Length: 334848 1181 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\cscui.dll SUCCESS 1182 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Attributes: A 1183 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll SUCCESS Options: Open Access: 00100020 1184 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Length: 334848 1185 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\cscui.dll SUCCESS 1186 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Attributes: A 1187 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll SUCCESS Options: Open Access: 00100020 1188 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\cscui.dll SUCCESS 1189 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\CSCDLL.dll SUCCESS Attributes: A 1190 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\CSCDLL.dll SUCCESS Options: Open Access: 00100020 1191 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\CSCDLL.dll SUCCESS 1192 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll SUCCESS Options: Open Access: 001200A9 1193 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\cscui.dll SUCCESS Length: 334848 1194 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll.124.Manifest NOT FOUND Options: Open Access: 001200A9 1195 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\cscui.dll.124.Config NOT FOUND Options: Open Access: 001200A9 1208 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\cscui.dll SUCCESS 1209 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1210 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\shell32.dll NOT FOUND Attributes: Error 1211 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1212 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1213 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\shell32.dll SUCCESS Options: Open Access: 00120189 1214 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1215 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS FileBasicInformation 1216 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 0 Length: 12 1217 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1218 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1219 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\shell32.dll SUCCESS 1220 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1221 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\shell32.dll NOT FOUND Attributes: Error 1222 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1223 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1224 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\shell32.dll SUCCESS Options: Open Access: 00120189 1225 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1226 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS FileBasicInformation 1227 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 0 Length: 12 1228 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1229 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1230 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\shell32.dll SUCCESS 1231 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1232 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\shell32.dll NOT FOUND Attributes: Error 1233 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1234 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1235 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\shell32.dll SUCCESS Options: Open Access: 00120189 1236 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1237 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS FileBasicInformation 1238 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 0 Length: 12 1239 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1240 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1241 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\shell32.dll SUCCESS 1242 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1243 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\shell32.dll NOT FOUND Attributes: Error 1244 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\shell32.dll NOT FOUND Attributes: Error 1245 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1246 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\shell32.dll SUCCESS Options: Open Access: 00120189 1247 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Attributes: A 1248 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS FileBasicInformation 1249 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 0 Length: 12 1250 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1251 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\shell32.dll SUCCESS Length: 8502272 1252 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\shell32.dll SUCCESS 1253 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1254 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1255 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1256 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1257 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1258 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1259 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1260 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1261 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1262 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1263 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1264 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1265 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1266 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1267 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1268 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1269 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1270 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1271 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1272 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1273 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1274 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1275 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1276 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1277 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1278 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1279 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1280 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1281 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1282 10:26:39 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1283 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1284 10:26:39 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1285 10:26:39 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1286 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1287 10:26:39 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1288 10:26:39 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1289 10:26:40 FTK Imager.exe:6196 READ C:\WINDOWS\system32\comctl32.dll SUCCESS Offset: 128000 Length: 4096 1290 10:26:41 FTK Imager.exe:6196 READ C:\WINDOWS\system32\comctl32.dll SUCCESS Offset: 357376 Length: 4096 1291 10:26:45 FTK Imager.exe:6196 READ C:\WINDOWS\system32\user32.dll SUCCESS Offset: 222208 Length: 4096 1292 10:26:47 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 1065984 Length: 8192 1293 10:26:47 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 8085504 Length: 16384 1294 10:26:47 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\shdocvw.dll SUCCESS Attributes: A 1295 10:26:47 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\shdocvw.dll SUCCESS Options: Open Access: 00100020 1296 10:26:47 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\shdocvw.dll SUCCESS Length: 1499136 1297 10:26:47 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\shdocvw.dll SUCCESS 1298 10:26:47 FTK Imager.exe:6196 READ C:\WINDOWS\System32\shdocvw.dll SUCCESS Offset: 0 Length: 32768 1299 10:26:47 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\shdocvw.dll SUCCESS Attributes: A 1300 10:26:47 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\shdocvw.dll SUCCESS Options: Open Access: 00100020 1301 10:26:47 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\shdocvw.dll SUCCESS 1302 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\msasn1.dll SUCCESS Offset: 25600 Length: 29184 1303 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\msasn1.dll SUCCESS Offset: 1024 Length: 8192 1304 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\CRYPTUI.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1305 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\CRYPTUI.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1306 10:26:48 FTK Imager.exe:428 READ C:\WINDOWS\system32\cryptui.dll SUCCESS Offset: 515072 Length: 4608 1319 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\cryptui.dll SUCCESS Offset: 263168 Length: 29696 1320 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\cryptui.dll SUCCESS Offset: 1024 Length: 32768 1321 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\imagehlp.dll SUCCESS Offset: 107520 Length: 29184 1322 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\imagehlp.dll SUCCESS Offset: 1024 Length: 8192 1323 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\wintrust.dll SUCCESS Offset: 136192 Length: 29696 1324 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\wintrust.dll SUCCESS Offset: 1024 Length: 4096 1325 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\imagehlp.dll SUCCESS Offset: 17408 Length: 32768 1326 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\imagehlp.dll SUCCESS Offset: 136704 Length: 2048 1327 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\wintrust.dll SUCCESS Offset: 165888 Length: 1024 1328 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\cryptui.dll SUCCESS Offset: 292864 Length: 1024 1329 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\msasn1.dll SUCCESS Offset: 54784 Length: 512 1330 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\RichEd20.dll NOT FOUND Attributes: Error 1331 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\RichEd20.dll SUCCESS Attributes: A 1332 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\RichEd20.dll SUCCESS Options: Open Access: 00100020 1333 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\RichEd20.dll SUCCESS Length: 433664 1334 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\RichEd20.dll SUCCESS Offset: 0 Length: 4096 1335 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\RichEd20.dll SUCCESS 1336 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\RichEd20.dll SUCCESS Offset: 392192 Length: 16384 1337 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\RichEd20.dll SUCCESS Offset: 361472 Length: 29184 1338 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\RichEd20.dll SUCCESS Offset: 1024 Length: 32768 1339 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\RichEd20.dll SUCCESS Offset: 390656 Length: 1536 1340 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\shdocvw.dll SUCCESS Options: Open Access: 001200A9 1341 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\shdocvw.dll SUCCESS Length: 1499136 1342 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\shdocvw.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 1343 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\System32\shdocvw.dll SUCCESS Offset: 892928 Length: 32768 1344 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\shdocvw.dll.123.Config NOT FOUND Options: Open Access: 001200A9 1345 10:26:48 FTK Imager.exe:428 READ C:\WINDOWS\System32\shdocvw.dll SUCCESS Offset: 1449984 Length: 4096 1358 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\shdocvw.dll SUCCESS 1671 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\wininet.dll SUCCESS Offset: 517120 Length: 32768 1672 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll SUCCESS Options: Open Access: Read 1673 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Attributes: A 1674 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Length: 1025024 1675 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\browseui.dll SUCCESS 1676 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Attributes: A 1677 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll SUCCESS Options: Open Access: 00100020 1678 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Length: 1025024 1679 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\browseui.dll SUCCESS 1680 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\System32\browseui.dll SUCCESS Offset: 0 Length: 32768 1681 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Attributes: A 1682 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll SUCCESS Options: Open Access: 00100020 1683 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\browseui.dll SUCCESS 1684 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll SUCCESS Options: Open Access: 001200A9 1685 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\System32\browseui.dll SUCCESS Length: 1025024 1686 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 1687 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\System32\browseui.dll SUCCESS Offset: 552960 Length: 32768 1688 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\System32\browseui.dll.123.Config NOT FOUND Options: Open Access: 001200A9 1689 10:26:48 FTK Imager.exe:428 READ C:\WINDOWS\System32\browseui.dll SUCCESS Offset: 991232 Length: 4096 1702 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\System32\browseui.dll SUCCESS 1703 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shell32.dll SUCCESS Offset: 8228864 Length: 16384 1704 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\shlwapi.dll SUCCESS Offset: 406528 Length: 8192 1705 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1706 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1707 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1708 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1709 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1710 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\url.dll SUCCESS Options: Open Access: 00120189 1711 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1712 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\url.dll SUCCESS FileBasicInformation 1713 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 0 Length: 12 1714 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 0 Length: 4096 1715 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1716 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1717 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 8192 Length: 32768 1718 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 98304 Length: 32768 1719 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 65536 Length: 32768 1720 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\url.dll SUCCESS 1721 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1722 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1723 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\url.dll SUCCESS Options: Open Access: 00120189 1724 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1725 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\url.dll SUCCESS FileBasicInformation 1726 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 0 Length: 12 1727 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1728 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1729 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\url.dll SUCCESS 1730 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1731 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1732 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\url.dll SUCCESS Options: Open Access: 00120189 1733 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1734 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\url.dll SUCCESS FileBasicInformation 1735 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 0 Length: 12 1736 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1737 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1738 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\url.dll SUCCESS 1739 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1740 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1741 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\url.dll SUCCESS Options: Open Access: 00120189 1742 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Attributes: A 1743 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\url.dll SUCCESS FileBasicInformation 1744 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\url.dll SUCCESS Offset: 0 Length: 12 1745 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1746 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\url.dll SUCCESS Length: 105984 1747 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\url.dll SUCCESS 1748 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1749 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1750 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1751 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1752 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1753 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1754 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1755 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1756 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 2199552 Length: 8192 1757 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 2220032 Length: 12288 1758 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 5210112 Length: 32768 1759 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 4710400 Length: 32768 1760 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1761 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1762 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1763 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1764 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1765 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1766 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1767 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1768 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1769 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1770 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1771 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1772 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1773 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1774 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1775 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1776 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1777 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1778 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 5177344 Length: 32768 1779 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1780 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1781 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1782 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1783 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1784 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1785 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1786 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1787 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1788 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1789 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1790 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1791 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00120189 1792 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1793 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS FileBasicInformation 1794 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 0 Length: 12 1795 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1796 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1797 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 3219456 Length: 32768 1798 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 3416064 Length: 32768 1799 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 3383296 Length: 32768 1800 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 1801 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1802 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1803 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00120189 1804 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1805 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS FileBasicInformation 1806 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 0 Length: 12 1807 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1808 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1809 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 1810 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1811 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1812 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00120189 1813 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1814 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS FileBasicInformation 1815 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 0 Length: 12 1816 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1817 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1818 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 1819 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1820 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1821 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\mshtml.dll SUCCESS Options: Open Access: 00120189 1822 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Attributes: A 1823 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS FileBasicInformation 1824 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\system32\mshtml.dll SUCCESS Offset: 0 Length: 12 1825 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1826 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\mshtml.dll SUCCESS Length: 3594752 1827 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\mshtml.dll SUCCESS 1828 10:26:48 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Options: Open Access: Read 1829 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Attributes: A 1830 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Length: 61240 1831 10:26:48 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS 1832 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Attributes: A 1833 10:26:48 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Options: Open Access: 00100020 1834 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Length: 61240 1835 10:26:48 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS 1836 10:26:48 FTK Imager.exe:6196 READ C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Offset: 0 Length: 32768 1837 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Attributes: A 1838 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Attributes: A 1839 10:26:48 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Options: Open Access: 00100020 1840 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Length: 61240 1841 10:26:48 FTK Imager.exe:6196 CLOSE C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS 1842 10:26:48 FTK Imager.exe:6196 READ C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Offset: 49152 Length: 2560 1843 10:26:48 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\Office12\msohevi.dll.2.Manifest NOT FOUND Options: Open Access: 001200A9 1844 10:26:48 FTK Imager.exe:6196 OPEN C:\Programme\Microsoft Office\Office12\msohevi.dll.2.Config NOT FOUND Options: Open Access: 001200A9 1851 10:26:48 FTK Imager.exe:6196 READ C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Offset: 17408 Length: 31232 1852 10:26:48 FTK Imager.exe:6196 READ C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Offset: 1024 Length: 16384 1853 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll SUCCESS Options: Open Access: 00100020 1854 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll SUCCESS 1855 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll SUCCESS Attributes: A 1857 10:26:48 FTK Imager.exe:6196 READ C:\Programme\Microsoft Office\Office12\msohevi.dll SUCCESS Offset: 48640 Length: 512 1858 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1859 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1860 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Options: Open Access: 00120189 1861 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1862 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS FileBasicInformation 1863 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 0 Length: 12 1864 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 0 Length: 4096 1865 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Length: 91136 1866 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Length: 91136 1867 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 16384 Length: 32768 1868 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 86016 Length: 32768 1869 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 49152 Length: 32768 1870 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS 1871 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1872 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1873 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Options: Open Access: 00120189 1874 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Attributes: A 1875 10:26:48 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS FileBasicInformation 1876 10:26:48 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Offset: 0 Length: 12 1877 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Length: 91136 1878 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS Length: 91136 1879 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\mydocs.dll SUCCESS 1880 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1881 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\LINKINFO.dll NOT FOUND Attributes: Error 1882 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\LINKINFO.dll SUCCESS Attributes: A 1883 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\LINKINFO.dll SUCCESS Options: Open Access: 00100020 1884 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\LINKINFO.dll SUCCESS 1885 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\ntshrui.dll NOT FOUND Attributes: Error 1886 10:26:48 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntshrui.dll SUCCESS Attributes: A 1887 10:26:48 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ntshrui.dll SUCCESS Options: Open Access: 00100020 1888 10:26:48 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ntshrui.dll SUCCESS 1889 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\Programme\AccessData\ATL.DLL NOT FOUND Attributes: Error 1890 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ATL.DLL SUCCESS Attributes: A 1891 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ATL.DLL SUCCESS Options: Open Access: 00100020 1892 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ATL.DLL SUCCESS 1893 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ntshrui.dll SUCCESS Options: Open Access: 001200A9 1894 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntshrui.dll SUCCESS Length: 145920 1895 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ntshrui.dll SUCCESS Offset: 0 Length: 32768 1896 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ntshrui.dll.123.Manifest NOT FOUND Options: Open Access: 001200A9 1897 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\ntshrui.dll SUCCESS Offset: 45056 Length: 32768 1898 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\ntshrui.dll.123.Config NOT FOUND Options: Open Access: 001200A9 1899 10:26:49 FTK Imager.exe:428 READ C:\WINDOWS\system32\ntshrui.dll SUCCESS Offset: 139264 Length: 4096 1906 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ntshrui.dll SUCCESS 1907 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1908 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1909 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Options: Open Access: 00120189 1910 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1911 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS FileBasicInformation 1912 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Offset: 0 Length: 12 1913 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1914 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1915 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 4382720 Length: 32768 1916 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS 1917 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1918 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1919 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Options: Open Access: 00120189 1920 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1921 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS FileBasicInformation 1922 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Offset: 0 Length: 12 1923 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1924 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1925 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS 1926 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1927 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1928 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Options: Open Access: 00120189 1929 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1930 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS FileBasicInformation 1931 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Offset: 0 Length: 12 1932 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1933 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1934 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 4349952 Length: 32768 1935 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS 1936 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1937 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1938 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Options: Open Access: 00120189 1939 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Attributes: A 1940 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS FileBasicInformation 1941 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Offset: 0 Length: 12 1942 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1943 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS Length: 8502272 1944 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\SYSTEM32\shell32.dll SUCCESS 1945 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1946 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1947 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1948 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1949 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1950 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1951 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1952 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1953 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1954 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 4096000 Length: 32768 1955 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1956 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1957 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1958 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1959 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1960 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1961 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1962 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1963 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1964 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1965 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1966 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1967 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1968 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1969 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1970 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1971 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1972 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1973 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1974 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1975 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1976 10:26:49 FTK Imager.exe:6196 OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: 00120189 1977 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1978 10:26:49 FTK Imager.exe:6196 SET INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS FileBasicInformation 1979 10:26:49 FTK Imager.exe:6196 READ C:\WINDOWS\system32\SHELL32.dll SUCCESS Offset: 0 Length: 12 1980 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1981 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8502272 1982 10:26:49 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 1983 10:26:49 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 1992 10:26:57 FTK Imager.exe:6196 READ C:\WINDOWS\system32\comctl32.dll SUCCESS Offset: 226304 Length: 32768 2013 10:27:00 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 791552 Length: 4096 2014 10:27:00 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1680384 Length: 20480 2302 10:27:06 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 939008 Length: 20480 2447 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\system32\comctl32.dll SUCCESS Offset: 377856 Length: 8192 2448 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\system32\user32.dll SUCCESS Offset: 312320 Length: 32768 2449 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1635328 Length: 16384 2450 10:27:14 FTK Imager.exe:6196 QUERY INFORMATION C:\WINDOWS\system32\ntdll.dll SUCCESS Attributes: A 2451 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 603136 Length: 8192 2452 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 2016256 Length: 32768 2453 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\VS7DEBUG\PDM.DLL SUCCESS Offset: 20480 Length: 4096 2454 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1135616 Length: 16384 2455 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSLS31.DLL SUCCESS Offset: 29696 Length: 4096 2456 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1664000 Length: 12288 2457 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\MSHTML.DLL SUCCESS Offset: 1602560 Length: 12288 2458 10:27:14 FTK Imager.exe:6196 CLOSE C:\WINDOWS\system32\ieframe.dll SUCCESS 2459 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\system32\advapi32.dll SUCCESS Offset: 214016 Length: 4096 2460 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 327680 Length: 4096 2461 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 53248 Length: 16384 2462 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 143360 Length: 32768 2463 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 12288 Length: 16384 2464 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\MSVCR71.DLL SUCCESS Offset: 110592 Length: 32768 2465 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\SYSTEM32\OLEDLG.DLL SUCCESS Offset: 21504 Length: 32768 2466 10:27:14 FTK Imager.exe:6196 READ C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll SUCCESS Offset: 566272 Length: 8192 2467 10:27:14 FTK Imager.exe:6196 READ C:\PROGRAMME\ACCESSDATA\CXIMAGE.DLL SUCCESS Offset: 638976 Length: 8192