Problem beim Scannen aus einer Anwendung W10 Canon ScanGear
Hallo zusammen!
ich skizzierte mal das Problem:
Beim Aufruf des Scanners aus einer beliebigen Anwendung heraus kam bisher die Scanmaske von Canon ScanGear und ermöglichte komfortables Einscannen mit Rauschreduzierung und weiteren Komfortfunktionen. Plötzlich kommt nur noch die Windows Scanner Maske mit rudimentären Scanfunktionen. Es sind aber keine Updates oder sonstige Änderungen am System gelaufen.
System:
W10, 1809 - aktuelles Patch
Canon Scanner MB5450 (aber auch anderes Modell (DR-260) getestet) mit aktuellen Treibern und Canon ScanGear
Was wir Ausschließen konnten bzw. getestet haben:
- De- und Neuinstallation aller Scanner-Komponenten mit Original Canon Software
- Neuinstallation des Gerätes mittels Windows-Treiber
- Deaktivieren von Virenschutz / Defender / Firewall
- Eintragen der Pfade in die Umgebungsvariablen
- Es scheint so zu sein, dass ScanGear beim Aufruf des Scanners via Twain kommt und das andere die Oberfläche bei Aufrufen via WIA ist
Status:
Wir erhalten beim Aufruf des ScanGears folgende Fehlermeldung: "ScanGear: Datei kann nicht gelesen oder geschrieben werden. Code: 4,252,0"
Ich bin für jeden Vorschlag dankbar!
ich skizzierte mal das Problem:
Beim Aufruf des Scanners aus einer beliebigen Anwendung heraus kam bisher die Scanmaske von Canon ScanGear und ermöglichte komfortables Einscannen mit Rauschreduzierung und weiteren Komfortfunktionen. Plötzlich kommt nur noch die Windows Scanner Maske mit rudimentären Scanfunktionen. Es sind aber keine Updates oder sonstige Änderungen am System gelaufen.
System:
W10, 1809 - aktuelles Patch
Canon Scanner MB5450 (aber auch anderes Modell (DR-260) getestet) mit aktuellen Treibern und Canon ScanGear
Was wir Ausschließen konnten bzw. getestet haben:
- De- und Neuinstallation aller Scanner-Komponenten mit Original Canon Software
- Neuinstallation des Gerätes mittels Windows-Treiber
- Deaktivieren von Virenschutz / Defender / Firewall
- Eintragen der Pfade in die Umgebungsvariablen
- Es scheint so zu sein, dass ScanGear beim Aufruf des Scanners via Twain kommt und das andere die Oberfläche bei Aufrufen via WIA ist
Status:
Wir erhalten beim Aufruf des ScanGears folgende Fehlermeldung: "ScanGear: Datei kann nicht gelesen oder geschrieben werden. Code: 4,252,0"
Ich bin für jeden Vorschlag dankbar!
Kommentieren
Teilen
Auf Facebook teilen
Auf X (Twitter) teilen
Auf Reddit teilen
Auf Linkedin teilenBitte markiere auch die Kommentare, die zur Lösung des Beitrags beigetragen haben
Content-ID: 435422
Url: https://administrator.de/forum/problem-beim-scannen-aus-einer-anwendung-w10-canon-scangear-435422.html
Ausgedruckt am: 24.04.2025 um 09:04 Uhr
7 Kommentare
Neuester Kommentar
Zitat von @trannel:
- Es scheint so zu sein, dass ScanGear beim Aufruf des Scanners via Twain kommt und das andere die Oberfläche bei Aufrufen via WIA ist
Richtig, die jeweilige Anwendung legt aber primär fest ob es WIA nutzt oder eben TWAIN, das sind ja zwei vollkommen unterschiedliche Techniken.- Es scheint so zu sein, dass ScanGear beim Aufruf des Scanners via Twain kommt und das andere die Oberfläche bei Aufrufen via WIA ist
Status:
Wir erhalten beim Aufruf des ScanGears folgende Fehlermeldung: "ScanGear: Datei kann nicht gelesen oder geschrieben werden. Code: 4,252,0"
Werfe doch mal den ProcessMonitor während dem Aufruf an dann siehst du welche Datei gemeint ist und kannst gegebenenfalls Rechte prüfen oder ob die Datei korrupt ist, oder ob die Platte oder RAM oder Dateisystem vielleicht einen Schuss haben.Wir erhalten beim Aufruf des ScanGears folgende Fehlermeldung: "ScanGear: Datei kann nicht gelesen oder geschrieben werden. Code: 4,252,0"
Vielen Dank für den Tipp. An der Anwendung hat sich nichts geändert und dennoch hat sich die Maske geändert.
Das ProcMon Log füge ich hier mal an:
Time of Day,"Process Name","PID","Operation","Path","Result","Detail"
18:55:02,6904273,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6914738,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6923771,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6949472,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\CNC178FD.ds","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,6978217,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7011687,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7064061,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\TPM.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7075809,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\TPM.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7120726,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\TPM.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7130519,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7133926,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7137580,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7140683,"twain.exe","10028","CreateFile","C:\Windows\System\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7143764,"twain.exe","10028","CreateFile","C:\Windows\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7145428,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin
\SCNDB.dll","NAME INVALID","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7152324,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7167402,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7203459,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNDB.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7219056,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7229421,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7454674,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNUI.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7461966,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\de-DE","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7464299,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\de","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7466493,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\en-US","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7468612,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\en","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7473846,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7481300,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7488694,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7498402,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7505857,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0__6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7514887,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7523900,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7530938,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7538975,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7552526,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7559763,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7568436,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7576096,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7583721,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7590852,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7598084,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7607220,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7611927,"csrss.exe","656","QueryAllInformationFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7.manifest","BUFFER OVERFLOW","CreationTime: 12.03.2019 18:30:04, LastAccessTime: 12.03.2019 18:30:01, LastWriteTime: 12.03.2019 18:30:01, ChangeTime: 22.03.2019 14:08:05, FileAttributes: A, AllocationSize: 4.096, EndOfFile: 3.924, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x8000000000f62, EaSize: 0, Access: Generic Read, Position: 0, Mode: Sequential Access, Synchronous IO Non-Alert, AlignmentRequirement: Word"
18:55:02,7615926,"csrss.exe","656","ReadFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7.manifest","END OF FILE","Offset: 3.924, Length: 8.180"
18:55:02,7623289,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7632180,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7640649,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7647792,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7655319,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379__6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7665854,"csrss.exe","656","QueryAllInformationFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf.manifest","BUFFER OVERFLOW","CreationTime: 12.03.2019 18:30:05, LastAccessTime: 12.03.2019 18:30:01, LastWriteTime: 12.03.2019 18:30:01, ChangeTime: 22.03.2019 14:08:05, FileAttributes: A, AllocationSize: 4.096, EndOfFile: 1.972, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x7000000000f85, EaSize: 0, Access: Generic Read, Position: 0, Mode: Sequential Access, Synchronous IO Non-Alert, AlignmentRequirement: Word"
18:55:02,7667922,"csrss.exe","656","ReadFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf.manifest","END OF FILE","Offset: 1.972, Length: 8.180"
18:55:02,7685329,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\mscms.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7685561,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7686037,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7686851,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7697056,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\mscms.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7697848,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7698041,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7698493,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7712396,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\mscms.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7713074,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmm.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7713649,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winspool.drv","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7714177,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7723755,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7724026,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7725159,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\USERENV.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7726022,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7729472,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7729874,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7730595,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\USERENV.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7744734,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7746101,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7746684,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7747539,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\userenv.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7752765,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\ColorAdapterClient.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7755952,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\ColorAdapterClient.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7762969,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\coloradapterclient.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7775369,"twain.exe","10028","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7786039,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7789240,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7795486,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7822647,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7825678,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7828680,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7831632,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7837465,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7841004,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7843988,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7846922,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7849928,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7852862,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7855822,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7858753,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7864749,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7867703,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7870821,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7873894,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7876837,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7880036,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7883147,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7886004,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7896803,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\CNCLID34.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8030516,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\CNCLID34.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8068711,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_DEU.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8081886,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_DEU.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8088703,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SG_DEU.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8101525,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_IMG.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8111467,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_IMG.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8120442,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SG_IMG.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8136817,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8163330,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNC_D3L.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8174900,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNC_D3L.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8551984,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNIF.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8563741,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNIF.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8600794,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNIF.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8613438,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNFLW.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8624839,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNFLW.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8673511,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNFLW.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8684052,"twain.exe","10028","CreateFile","C:\WINDOWS\TWAIN_32\SG20\MB5400 series\CNC_470M.DAT","PATH NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a"
18:55:02,8712942,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8726094,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\nsload.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8730195,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8730377,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8736139,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8736727,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\MSIMG32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8740750,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8741283,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\winmm.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8742456,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8749693,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8755255,"nsload.exe","9336","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.17763.379_none_7e5065a4762b3775\GdiPlus.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8755474,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\msimg32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8755647,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8763497,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8769851,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\nsload.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8780459,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8795978,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\DUser.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8799175,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\DUser.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8800194,"nsload.exe","9336","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8805914,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\duser.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8809559,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8817944,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8869434,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8872158,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8875543,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8879467,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8886768,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8890093,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8893523,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8893659,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\xmllite.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8896772,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8900039,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8903340,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8907940,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8910773,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8918581,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8921861,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8925141,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8928334,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8931285,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8934628,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8938002,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8941095,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8948588,"twain.exe","10028","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\duser.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8966313,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\atlthunk.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8975649,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8995683,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9002882,"twain.exe","10028","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf\comctl32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9007310,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\imageres.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9010793,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\imageres.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9017770,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\imageres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9024190,"twain.exe","10028","CreateFile","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9026189,"twain.exe","10028","CreateFile","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9028051,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9029908,"twain.exe","10028","CreateFile","C:\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9031736,"twain.exe","10028","CreateFile","C:\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9035216,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9036889,"twain.exe","10028","CreateFile","C:\Windows\System32\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9038574,"twain.exe","10028","CreateFile","C:\Windows\System32\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9042037,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\en-US\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9044341,"twain.exe","10028","CreateFileMapping","C:\Windows\System32\en-US\imageres.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9047212,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9057256,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9110475,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9114001,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9114067,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9120531,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9122162,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9123381,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9128850,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\gimp-2.10.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9134565,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9139464,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7\comctl32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9151648,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9172113,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9180235,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\WindowsShell.Manifest","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9190276,"gimp-2.10.exe","2520","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9200981,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9216384,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9265833,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9343591,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9346761,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9350117,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9358273,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9389436,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9394695,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9398336,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9401725,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9405160,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9408285,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9411405,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9414701,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9421281,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9424120,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9430101,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9433581,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9436675,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9440220,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9443507,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9446719,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
Das ProcMon Log füge ich hier mal an:
Time of Day,"Process Name","PID","Operation","Path","Result","Detail"
18:55:02,6904273,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6914738,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6923771,"twain.exe","10028","CreateFile","C:\Users\praxis\AppData\Local\Temp\GIMPPortableTemp\TWAIN.LOG","NAME COLLISION","Desired Access: Generic Read/Write, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0"
18:55:02,6949472,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\CNC178FD.ds","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,6978217,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7011687,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7064061,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\TPM.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7075809,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\TPM.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7120726,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\TPM.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7130519,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7133926,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7137580,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7140683,"twain.exe","10028","CreateFile","C:\Windows\System\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7143764,"twain.exe","10028","CreateFile","C:\Windows\SCNDB.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7145428,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin
\SCNDB.dll","NAME INVALID","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7152324,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7167402,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7203459,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNDB.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7219056,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7229421,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7454674,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNUI.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7461966,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\de-DE","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7464299,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\de","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7466493,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\en-US","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7468612,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\en","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7473846,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7481300,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7488694,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7498402,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7505857,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0__6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7514887,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7523900,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7530938,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7538975,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls\6.0.0.0_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7552526,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7559763,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7568436,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7576096,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7583721,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7590852,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7598084,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7607220,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.mui\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7611927,"csrss.exe","656","QueryAllInformationFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7.manifest","BUFFER OVERFLOW","CreationTime: 12.03.2019 18:30:04, LastAccessTime: 12.03.2019 18:30:01, LastWriteTime: 12.03.2019 18:30:01, ChangeTime: 22.03.2019 14:08:05, FileAttributes: A, AllocationSize: 4.096, EndOfFile: 3.924, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x8000000000f62, EaSize: 0, Access: Generic Read, Position: 0, Mode: Sequential Access, Synchronous IO Non-Alert, AlignmentRequirement: Word"
18:55:02,7615926,"csrss.exe","656","ReadFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7.manifest","END OF FILE","Offset: 3.924, Length: 8.180"
18:55:02,7623289,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_de-DE_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7632180,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_de_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7640649,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_en-US_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7647792,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379_en_6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7655319,"csrss.exe","656","CreateFile","C:\WINDOWS\assembly\GAC_32\Microsoft.Windows.Common-Controls.Resources\6.0.17763.379__6595b64144ccf1df\Microsoft.Windows.Common-Controls.Resources.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,7665854,"csrss.exe","656","QueryAllInformationFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf.manifest","BUFFER OVERFLOW","CreationTime: 12.03.2019 18:30:05, LastAccessTime: 12.03.2019 18:30:01, LastWriteTime: 12.03.2019 18:30:01, ChangeTime: 22.03.2019 14:08:05, FileAttributes: A, AllocationSize: 4.096, EndOfFile: 1.972, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x7000000000f85, EaSize: 0, Access: Generic Read, Position: 0, Mode: Sequential Access, Synchronous IO Non-Alert, AlignmentRequirement: Word"
18:55:02,7667922,"csrss.exe","656","ReadFile","C:\Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf.manifest","END OF FILE","Offset: 1.972, Length: 8.180"
18:55:02,7685329,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\mscms.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7685561,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7686037,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7686851,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7697056,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\mscms.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7697848,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7698041,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7698493,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7712396,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\mscms.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7713074,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmm.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7713649,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winspool.drv","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7714177,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7723755,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7724026,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7725159,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\USERENV.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7726022,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7729472,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7729874,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7730595,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\USERENV.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7744734,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7746101,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7746684,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7747539,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\userenv.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7752765,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\ColorAdapterClient.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7755952,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\ColorAdapterClient.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7762969,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\coloradapterclient.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7775369,"twain.exe","10028","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7786039,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7789240,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7795486,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,7822647,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7825678,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7828680,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7831632,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7837465,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7841004,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7843988,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7846922,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7849928,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7852862,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7855822,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7858753,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7864749,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7867703,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7870821,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7873894,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7876837,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7880036,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7883147,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7886004,"twain.exe","10028","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,7896803,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\CNCLID34.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8030516,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\CNCLID34.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8068711,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_DEU.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8081886,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_DEU.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8088703,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SG_DEU.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8101525,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_IMG.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8111467,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SG_IMG.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8120442,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SG_IMG.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8136817,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNHMCA.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8163330,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNC_D3L.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8174900,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\CNC_D3L.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8551984,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNIF.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8563741,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNIF.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8600794,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNIF.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8613438,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNFLW.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8624839,"twain.exe","10028","CreateFileMapping","C:\Windows\twain_32\SG20\SCNFLW.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8673511,"csrss.exe","656","CreateFile","C:\Windows\twain_32\SG20\SCNFLW.DLL.2.Config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: BUERO--SERVER\praxis"
18:55:02,8684052,"twain.exe","10028","CreateFile","C:\WINDOWS\TWAIN_32\SG20\MB5400 series\CNC_470M.DAT","PATH NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a"
18:55:02,8712942,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8726094,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\nsload.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8730195,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8730377,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\WINMM.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8736139,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8736727,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\MSIMG32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8740750,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8741283,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\winmm.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8742456,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8749693,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8755255,"nsload.exe","9336","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.17763.379_none_7e5065a4762b3775\GdiPlus.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8755474,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\msimg32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8755647,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\WINMMBASE.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8763497,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8769851,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\nsload.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8780459,"nsload.exe","9336","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8795978,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\DUser.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8799175,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\DUser.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8800194,"nsload.exe","9336","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8805914,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\duser.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,8809559,"nsload.exe","9336","CreateFile","C:\Program Files\Citrix\Secure Access Client\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8817944,"nsload.exe","9336","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8869434,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8872158,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8875543,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8879467,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8886768,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8890093,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8893523,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8893659,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\xmllite.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8896772,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8900039,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8903340,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8907940,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8910773,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8918581,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8921861,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8925141,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8928334,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8931285,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8934628,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8938002,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8941095,"nsload.exe","9336","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8948588,"twain.exe","10028","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\duser.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8966313,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\atlthunk.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,8975649,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,8995683,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\twain.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9002882,"twain.exe","10028","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.379_de-de_ba7fe5ab5960e3cf\comctl32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9007310,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\lib\gimp\2.0\plug-ins\twain\imageres.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9010793,"twain.exe","10028","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\imageres.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9017770,"twain.exe","10028","CreateFileMapping","C:\Windows\SysWOW64\imageres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9024190,"twain.exe","10028","CreateFile","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9026189,"twain.exe","10028","CreateFile","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9028051,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9029908,"twain.exe","10028","CreateFile","C:\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9031736,"twain.exe","10028","CreateFile","C:\Windows\System32\de-DE\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9035216,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9036889,"twain.exe","10028","CreateFile","C:\Windows\System32\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9038574,"twain.exe","10028","CreateFile","C:\Windows\System32\de\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9042037,"twain.exe","10028","CreateFile","C:\Windows\SysWOW64\en-US\imageres.dll.mui","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
18:55:02,9044341,"twain.exe","10028","CreateFileMapping","C:\Windows\System32\en-US\imageres.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9047212,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9057256,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNUI.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9110475,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9114001,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9114067,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\MSVFW32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9120531,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9122162,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\msvfw32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9123381,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9128850,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\gimp-2.10.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9134565,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9139464,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.379_none_4d6572bf1b98bda7\comctl32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
18:55:02,9151648,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\twain_32\SG20\SCNDB.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9172113,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleacc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9180235,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\WindowsShell.Manifest","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9190276,"gimp-2.10.exe","2520","CreateFileMapping","C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.10.24.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\msvfw32.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9200981,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9216384,"gimp-2.10.exe","2520","CreateFile","C:\Users\praxis\Desktop\GIMPPortable\App\gimp\bin\OLEACCRC.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9265833,"gimp-2.10.exe","2520","CreateFileMapping","C:\Windows\SysWOW64\oleaccrc.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
18:55:02,9343591,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9346761,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9350117,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9358273,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9389436,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9394695,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9398336,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9401725,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIDEU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9405160,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9408285,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9411405,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9414701,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9421281,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9424120,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9430101,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9433581,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUIENU.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9436675,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9440220,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9443507,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
18:55:02,9446719,"gimp-2.10.exe","2520","CreateFile","C:\Windows\twain_32\SG20\SCNUILOC.dll.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
GIMP Portable?? Und dann versucht das Teil DLLs ins Windowsverzeichnis zu schreiben?? Hört sich verdächtig nach Infektion an.
Naja, scheint ja offensichtlich gelöst zu sein, na dann ciao.
Naja, scheint ja offensichtlich gelöst zu sein, na dann ciao.
Gimp hatten wir nur zum Testen verwendet. Es ist bei allen Anwendungen so. Das Problem besteht aber leider fortan!
Neues Userprofil gecheckt? Temporäre Dateien gelöscht? sfc durchlaufen lassen? Scheint als fehlten essentielle Twain Komponenten des Systems.
Danke für Deine Tipps.
Wir haben es als Admin und als Nutzer getestet. Beides funktioniert nicht.
Temporäre Dateien sind gelöscht.
SFC haben wir noch nciht durchlaufen lassen, das testen wir!
Wir haben es als Admin und als Nutzer getestet. Beides funktioniert nicht.
Temporäre Dateien sind gelöscht.
SFC haben wir noch nciht durchlaufen lassen, das testen wir!
C:\WINDOWS\system32>sfc /scannow
Systemsuche wird gestartet. Dieser Vorgang kann einige Zeit dauern.
Überprüfungsphase der Systemsuche wird gestartet.
Überprüfung 100 % abgeschlossen.
Der Windows-Ressourcenschutz hat keine Integritätsverletzungen
gefunden.
Systemsuche wird gestartet. Dieser Vorgang kann einige Zeit dauern.
Überprüfungsphase der Systemsuche wird gestartet.
Überprüfung 100 % abgeschlossen.
Der Windows-Ressourcenschutz hat keine Integritätsverletzungen
gefunden.
