%LOCALAPPDATA%\assembly\tmp\FFCWMSTU
new catalogue created
%LOCALAPPDATA%\assembly\tmp\FFCWMSTU\WsAppFoundation.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\FFCWMSTU\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\D91TPRCA
new catalogue created
%LOCALAPPDATA%\assembly\tmp\D91TPRCA\WsAppCommon.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\D91TPRCA\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\NW22NILX
new catalogue created
%LOCALAPPDATA%\assembly\tmp\NW22NILX\WUL.Core.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\NW22NILX\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\D9EKTA1S
new catalogue created
%LOCALAPPDATA%\assembly\tmp\D9EKTA1S\WUL.Localization.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\D9EKTA1S\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\AQTAD1R2
new catalogue created
%LOCALAPPDATA%\assembly\tmp\AQTAD1R2\WUL.Ctrls.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\AQTAD1R2\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\UQD50V6T
new catalogue created
%LOCALAPPDATA%\assembly\tmp\UQD50V6T\Newtonsoft.Json.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\UQD50V6T\__AssemblyInfo__.ini
new file created
%APPDATA%\Microsoft\Crypto\RSA\%ID-USER-SID%\0d49d7a6291aa40c3b2f951208a080ac_36fa08c3-1cc7-41f7-b2d1-95e0063f911e
new file created
%APPDATA%\Microsoft\Crypto\RSA\%ID-USER-SID%\1de0450eb2469dd2539dfaacfc29cc35_36fa08c3-1cc7-41f7-b2d1-95e0063f911e
new file created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\MSG_PRE_{D95235BD-4705-4D70-95D7-46BA63D43786}1612046895
file renamed
%LOCALAPPDATA%\assembly\tmp\ZKC12FX6
new catalogue created
%LOCALAPPDATA%\assembly\tmp\ZKC12FX6\WsAppFoundation.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\ZKC12FX6\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\MEIZUDM5
new catalogue created
%LOCALAPPDATA%\assembly\tmp\MEIZUDM5\WsAppCommon.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\MEIZUDM5\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\22BR56D8
new catalogue created
%LOCALAPPDATA%\assembly\tmp\22BR56D8\WUL.Core.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\22BR56D8\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\BOQFZIUU
new catalogue created
%LOCALAPPDATA%\assembly\tmp\BOQFZIUU\WUL.Localization.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\BOQFZIUU\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\VPU9AYYB
new catalogue created
%LOCALAPPDATA%\assembly\tmp\VPU9AYYB\WUL.Ctrls.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\VPU9AYYB\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\OYJ2MD3K
new catalogue created
%LOCALAPPDATA%\assembly\tmp\OYJ2MD3K\Newtonsoft.Json.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\OYJ2MD3K\__AssemblyInfo__.ini
new file created
%APPDATA%\Microsoft\Crypto\RSA\%ID-USER-SID%\0bba8b199721b1fad3a450f4e77aa535_36fa08c3-1cc7-41f7-b2d1-95e0063f911e
new file created
%APPDATA%\Microsoft\Crypto\RSA\%ID-USER-SID%\b19191299f6c34950105997297938efa_36fa08c3-1cc7-41f7-b2d1-95e0063f911e
new file created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\MSG_PRE_{15777212-026E-4303-A7BB-C7055A6049DD}1612047744
file renamed
%LOCALAPPDATA%\assembly\tmp\WQ17KPFR
new catalogue created
%LOCALAPPDATA%\assembly\tmp\WQ17KPFR\WsAppFoundation.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\WQ17KPFR\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\XKU35M0M
new catalogue created
%LOCALAPPDATA%\assembly\tmp\XKU35M0M\WsAppCommon.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\XKU35M0M\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\IK1BM3QG
new catalogue created
%LOCALAPPDATA%\assembly\tmp\IK1BM3QG\WUL.Core.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\IK1BM3QG\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\PHHTU6NS
new catalogue created
%LOCALAPPDATA%\assembly\tmp\PHHTU6NS\WUL.Localization.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\PHHTU6NS\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\APKZUKV2
new catalogue created
%LOCALAPPDATA%\assembly\tmp\APKZUKV2\WUL.Ctrls.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\APKZUKV2\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\tmp\TXXT30U8
new catalogue created
%LOCALAPPDATA%\assembly\tmp\TXXT30U8\Newtonsoft.Json.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\TXXT30U8\__AssemblyInfo__.ini
new file created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\6f\655C8779\\@C:\Program Files (x86)\Common Files\system\wab32res.dll,-10100
new registry key parameter created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\MSG_PRE_{FC28EED7-39A6-4BD6-B15B-5C643C1A754C}1612047889
file renamed
%ALLUSERSPROFILE%\Wondershare\dr.fone\log\DrFoneRecovery.log
new file created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data
new catalogue created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\tmp
new file created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\sdk.log
new file created
%PROGRAMFILES(X86)%\Wondershare\drfone\Addins\Recovery\data\sdk.cf
new file created
%APPDATA%\Wondershare\USBResTemp
new catalogue created
%APPDATA%\Wondershare\USBResTemp\DrFoneRecovery
new catalogue created
%LOCALAPPDATA%\assembly\tmp\0SW0Y049
new catalogue created
%LOCALAPPDATA%\assembly\tmp\0SW0Y049\WsAppFoundation.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\0SW0Y049\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\80910b9f
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\80910b9f\003b21b9_49c3d601
catalogue moved
%LOCALAPPDATA%\assembly\tmp\W7Q8VN7Z
new catalogue created
%LOCALAPPDATA%\assembly\tmp\W7Q8VN7Z\WsAppCommon.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\W7Q8VN7Z\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\997b0a96
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\997b0a96\000ef0b7_49c3d601
catalogue moved
%LOCALAPPDATA%\assembly\tmp\RWP7H58F
new catalogue created
%LOCALAPPDATA%\assembly\tmp\RWP7H58F\WUL.Core.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\RWP7H58F\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\5e69d4a1
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\5e69d4a1\0071a190_c866d601
catalogue moved
%LOCALAPPDATA%\assembly\tmp\MY2K68NE
new catalogue created
%LOCALAPPDATA%\assembly\tmp\MY2K68NE\WUL.Localization.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\MY2K68NE\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\cb8aeaf2
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\cb8aeaf2\0071a190_c866d601
catalogue moved
%LOCALAPPDATA%\assembly\tmp\GQAM66XT
new catalogue created
%LOCALAPPDATA%\assembly\tmp\GQAM66XT\WUL.Ctrls.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\GQAM66XT\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\931c3c44
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\931c3c44\009ed291_c866d601
catalogue moved
%ALLUSERSPROFILE%\Wondershare\WAF\Log\com.wondershare.drfonewin_DrFoneRecovery.log
new file created
%LOCALAPPDATA%\assembly\tmp\EFTYY5YH
new catalogue created
%LOCALAPPDATA%\assembly\tmp\EFTYY5YH\Newtonsoft.Json.DLL
new file created
%LOCALAPPDATA%\assembly\tmp\EFTYY5YH\__AssemblyInfo__.ini
new file created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\1a5c5efa
new catalogue created
%LOCALAPPDATA%\assembly\dl3\6LQDVK86.LMX\M7KRCED8.05A\1a5c5efa\009ed291_c866d601
catalogue moved