%SYSTEMROOT%\System32\spool\PRINTERS\00008.SPL
new file created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\GetPrinter
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\Attributes
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\PrinterName
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\PortName
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\DriverName
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\SSPrint\us008\Performance\\Devmode
new registry key parameter created
%USERPROFILE%\Downloads\~$Snow_and_Chadwick (1).pptx
new file created
%APPDATA%\Microsoft\Office\Recent\Snow_and_Chadwick (1).LNK
new file created
%USERPROFILE%\Downloads\~$Snow_and_Chadwick.pptx
new file created
%APPDATA%\Microsoft\Office\Recent\Snow_and_Chadwick.LNK
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\8M4HQ8ZG9QWXNRZRWCG4.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe808797.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe808797.TMP
file renamed
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\4HS0479ELUHCF4ZYZE5I.temp
new file created
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02900688[[fn=Facet]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM16401371[[fn=Atlas]].thmx
file moved
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80b31c.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80b31c.TMP
file renamed
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02836342[[fn=Ion]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02900769[[fn=Retrospect]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02892315[[fn=Wisp]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033923[[fn=Depth]].thmx
file moved
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\Z9CAYTL29STP6SPBX5DZ.temp
new file created
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02900722[[fn=Ion Boardroom]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457452[[fn=Celestial]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM16401375[[fn=Madison]].thmx
file moved
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02900720[[fn=Integral]].thmx
file moved
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80ca0f.TMP
new file created
%APPDATA%\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM02900743[[fn=Organic]].thmx
file moved
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80ca0f.TMP
file renamed
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\QO5N9LY2VB84UYWX08EU.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80e22b.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RFe80e22b.TMP
file renamed
HKEY_USERS\%ID-USER-SID%\Software\Samsung\PrintingAlert\PrintJobInfo\Samsung ML-2580 Series (USB001)
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\Samsung\PrintingAlert\PrintJobInfo\Samsung ML-2580 Series (USB001)\\TotalPage
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\Samsung\PrintingAlert\PrintJobInfo\Samsung ML-2580 Series (USB001)\\SpoolerJobID
new registry key parameter created
%APPDATA%\Microsoft\PowerPoint\PPT16.pcb
new file created