%APPDATA%\Wondershare\PDFelement\Log\PDFelement0.log
new file created
%APPDATA%\Wondershare\PDFelement\Log\sdk.msg
new file created
%APPDATA%\Wondershare\PDFelement\Config\WSID\AuthInfo.dat
new file created
%APPDATA%\Wondershare\PDFelement\Log\tmp
new file created
%APPDATA%\Wondershare\PDFelement\Log\sdk.log
new file created
%APPDATA%\Wondershare\PDFelement\Log\sdk.cf
new file created
%APPDATA%\Wondershare\PDFelement\Log\sdk.msg.bak
new file created
%APPDATA%\Wondershare\PDFelement\Config\WSID
new catalogue created
%APPDATA%\Wondershare\PDFelement\Config\WSID\UserInfo.dat
new file created
%APPDATA%\Wondershare\PDFelement\Config\WSID\DeviceInfo.dat
new file created
%APPDATA%\Wondershare\PDFelement\Config\MessageCenterConfig_New.config
new file created
%APPDATA%\Wondershare\PDFelement\Config\MessageCenter.config
new file created
%APPDATA%\Wondershare\PDFelement\Config\NPS.ini
new file created
%ALLUSERSPROFILE%\mntemp
new file created
%APPDATA%\Wondershare\PDFelement\Log\MSG_PRE_{F4C8ADDC-86AD-4234-B1E8-326330CE6D42}1610593324
file renamed
%APPDATA%\Wondershare\PDFelement\Log\MSG_PRE_{8DED84F6-0099-4591-BE72-3162E4B1797E}1610603258
file renamed
%APPDATA%\Microsoft\Windows\Libraries\~ocuments.tmp
new file created
%APPDATA%\Microsoft\Windows\Libraries\Documents.library-ms~RF4139ea0.TMP
new file created
%APPDATA%\Microsoft\Windows\Libraries\Documents.library-ms~RF4139ea0.TMP
file renamed
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\4\655C8779\\@C:\WINDOWS\system32\fxsresm.dll,-2365
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\4\655C8779\\@C:\WINDOWS\system32\wfsr.dll,-57605
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\4\655C8779\\@C:\WINDOWS\system32\wfsr.dll,-57609
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\\GroupByDirection
new registry key parameter created
%APPDATA%\Wondershare\PDFelement\Config\RecentFiles.ini
new file created
%APPDATA%\Wondershare\PDFelement\Temp
new catalogue created
%APPDATA%\Wondershare\PDFelement\Temp\AutoGuardar
new catalogue created
%APPDATA%\Wondershare\PDFelement\Config\AutoSave.ini
new file created
%SYSTEMROOT%\System32\spool\PRINTERS\00005.SPL
new file created
%SYSTEMROOT%\System32\spool\PRINTERS\00006.SPL
new file created
%APPDATA%\Microsoft\Windows\Libraries\Documents.library-ms~RF4270e74.TMP
new file created
%APPDATA%\Microsoft\Windows\Libraries\Documents.library-ms~RF4270e74.TMP
file renamed
%USERPROFILE%\Documents\Combinar.pdf
new file created
%APPDATA%\Wondershare\PDFelement\Temp\Info_SaveAs
new catalogue created
%APPDATA%\Wondershare\PDFelement\Temp\Info_SaveAs\1098910304.temp
new file created
%APPDATA%\Wondershare\PDFelement\Log\PDFelement9.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement8.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement7.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement6.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement5.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement4.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement3.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement2.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\PDFelement1.log
file renamed
%APPDATA%\Wondershare\PDFelement\Log\MSG_PRE_{CD2452FC-15A3-4316-94AC-2B40C7FDAE5F}1613049157
file renamed
%APPDATA%\Wondershare\PDFelement\Config\Convert.ini
new file created
%APPDATA%\Wondershare\PDFelement\Log\MSG_PRE_{424D94FC-336B-473F-9ED6-239C3CF1E128}1613049463
file renamed
%APPDATA%\Wondershare\PDFelement\Temp\AutoSave\c8ea4352-2932-45bd-87e5-94e3eac71e44.sv$
new file created