Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 304

for MFT

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

entry
| Node entry for MFT entry was successfully constructed
| Start of getting file parametres(size, time, date)
| End of getting file parametres(size, time, date)
| !!!---Entering the parsing loop---!!!
| !!!---End the parsing loop---!!!
| --> read MFT record 142114
| Mft read mode is FAST
| Try to apply Sector Fixups
| End of apply Sector Fixups
| ------MFT RECORD DUMP-----| MFT record name --- teste3.lnk
| MFT record parent dir --- 325
| MFT record file size --- 558
| MFT record first cluster --- 0
| MFT record is directory --- 0
| ------END OF MFT RECORD DUMP-----| file name: teste3.lnk
| Constructing node entry for MFT entry
| Node entry for MFT entry was successfully constructed
| Start of getting file parametres(size, time, date)
| End of getting file parametres(size, time, date)
| !!!---Entering the parsing loop---!!!
| !!!---End the parsing loop---!!!
| --> read MFT record 142115
| Mft read mode is FAST
| Try to apply Sector Fixups
| End of apply Sector Fixups
| ------MFT RECORD DUMP-----| MFT record name --- MSHist012012082820120829
| MFT record parent dir --- 8207
| MFT record file size --- 0
| MFT record first cluster --- 0
| MFT record is directory --- 1
| ------END OF MFT RECORD DUMP-----| file name: MSHist012012082820120829
| Constructing node entry for MFT entry
| Node entry for MFT entry was successfully constructed
| Start of getting file parametres(size, time, date)
| End of getting file parametres(size, time, date)
| !!!---Entering the parsing loop---!!!
| !!!---End the parsing loop---!!!
| --> read MFT record 142116
| Mft read mode is FAST
| Try to apply Sector Fixups
| End of apply Sector Fixups
| ------MFT RECORD DUMP-----| MFT record name --- Estimativa ABAP 10.04.2012.docx
| MFT record parent dir --- 142094
| MFT record file size --- 12918
| MFT record first cluster --- 6781604
| MFT record is directory --- 0
| ------END OF MFT RECORD DUMP-----| file name: Estimativa ABAP 10.04.2012.docx
| Constructing node entry for MFT entry
| Node entry for MFT entry was successfully constructed
| Start of getting file parametres(size, time, date)
| End of getting file parametres(size, time, date)
| !!!---Entering the parsing loop---!!!
| !!!---End the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142117


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- mso-x-none.cab
MFT record parent dir --- 142108
MFT record file size --- 8778530
MFT record first cluster --- 8838175
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: mso-x-none.cab
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142118
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {E0A5F44F-4497-42E4-9AF7-76EAE7D4C40B}
MFT record parent dir --- 332
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: {E0A5F44F-4497-42E4-9AF7-76EAE7D4C40B}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142119
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000db4
MFT record parent dir --- 88398
MFT record file size --- 19886
MFT record first cluster --- 5219179
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000db4
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142120
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Estimativa Passo 1. Cenrio Atual.docx

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 142094


MFT record file size --- 302070
MFT record first cluster --- 6928728
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Estimativa Passo 1. Cenrio Atual.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142121
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- zabap_p04_01
MFT record parent dir --- 107064
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: zabap_p04_01
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142122
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- snapshot.etl
MFT record parent dir --- 128093
MFT record file size --- 344064
MFT record first cluster --- 10118654
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: snapshot.etl
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142123
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ~DF418B4DDB060688C5.TMP
MFT record parent dir --- 333
MFT record file size --- 163840
MFT record first cluster --- 6573636
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ~DF418B4DDB060688C5.TMP

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
hotProp
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142124
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- nTHT7JYZ69REWJN0q5sD99zpxM8=
MFT record parent dir --- 91431
MFT record file size --- 24841
MFT record first cluster --- 5250976
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: nTHT7JYZ69REWJN0q5sD99zpxM8=
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142125
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {dfeaed09-eb80-4d4a-9246-3c5842058c2d}_OnDiskSnaps

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 2546


MFT record file size --- 14264
MFT record first cluster --- 6795054
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: {dfeaed09-eb80-4d4a-9246-3c5842058c2d}_OnDiskSnapshotProp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142126
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- UNS.EXE-40FB88B6.pf
MFT record parent dir --- 8051
MFT record file size --- 31860
MFT record first cluster --- 1046879
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: UNS.EXE-40FB88B6.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---End the parsing loop---!!!


--> read MFT record 142127
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- sap.services3241305865
MFT record parent dir --- 124742
MFT record file size --- 670
MFT record first cluster --- 1127810
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: sap.services3241305865
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142128
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- index.dat
MFT record parent dir --- 142115
MFT record file size --- 32768
MFT record first cluster --- 46960
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: index.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142129
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001159
MFT record parent dir --- 88398
MFT record file size --- 56617
MFT record first cluster --- 10826490
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001159
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142130
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP------

INFO | MFT record name --- Estimativa Passo 2. Cenrio Proposto.docx


INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 11427
INFO | MFT record first cluster --- 1040748
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Estimativa Passo 2. Cenrio Proposto.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142131
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 898163f7cd63b3000b0acf2e7690939bf5d7ccee19bdd17c4c
c26c2a02bec052.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 13279
INFO | MFT record first cluster --- 1052028
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 898163f7cd63b3000b0acf2e7690939bf5d7ccee19bdd17c4cc26c2a02b
ec052.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142132
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_5b0d3853a6569efb266d9da548ca5a84_31bf3856ad3
64e35_6.1.7600.21256_none_195f087e86ee1fca.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 698
INFO | MFT record first cluster --- 1051990
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_5b0d3853a6569efb266d9da548ca5a84_31bf3856ad364e35_6.1
.7600.21256_none_195f087e86ee1fca.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142133
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142019

INFO | MFT record file size --- 1910


INFO | MFT record first cluster --- 6777973
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142134
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_d0da32430cd13cb7e18d10914919de14_31bf3856ad3
64e35_6.1.7600.17056_none_8917d2ebeca70d0a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 698
INFO | MFT record first cluster --- 1761811
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_d0da32430cd13cb7e18d10914919de14_31bf3856ad364e35_6.1
.7600.17056_none_8917d2ebeca70d0a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142135
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_10f32a740e172a81c895f679f0cc79bc_31bf3856ad3
64e35_6.1.7600.21256_none_976d4b72e238c69a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 711
INFO | MFT record first cluster --- 1830932
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_10f32a740e172a81c895f679f0cc79bc_31bf3856ad364e35_6.1
.7600.21256_none_976d4b72e238c69a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142136
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_5dc8296b780b56d0309709d0874adb8f_31bf3856ad3
64e35_6.1.7600.17056_none_f6c7b8369d1eb335.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 711

INFO | MFT record first cluster --- 1861283


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_5dc8296b780b56d0309709d0874adb8f_31bf3856ad364e35_6.1
.7600.17056_none_f6c7b8369d1eb335.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142137
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- b0e63d0f4f5c732fc0b34c9634f9cf0bf0811d1041fa1938d5
e3073ee42d5e8f.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 15515
INFO | MFT record first cluster --- 1052908
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: b0e63d0f4f5c732fc0b34c9634f9cf0bf0811d1041fa1938d5e3073ee42
d5e8f.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142138
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 8bb391b4db5b414f.dat
INFO | MFT record parent dir --- 151904
INFO | MFT record file size --- 5709
INFO | MFT record first cluster --- 4031181
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 8bb391b4db5b414f.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142139
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_cdd4c496a8286a1f2f8e6a632e92933b_31bf3856ad3
64e35_6.1.7600.21256_none_c2ebf90914346447.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 700
INFO | MFT record first cluster --- 2023438
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_cdd4c496a8286a1f2f8e6a632e92933b_31bf3856ad364e35_6.1


.7600.21256_none_c2ebf90914346447.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142140
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Estimativa Publicao do Relatrio ZZQM0040.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 123818
INFO | MFT record first cluster --- 6581092
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Estimativa Publicao do Relatrio ZZQM0040.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142141
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Estimativa WebDynpro Java - Camargo Correa.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 123372
INFO | MFT record first cluster --- 7041480
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Estimativa WebDynpro Java - Camargo Correa.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142142
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_ff2f877a4b8f9444ecabf23062094256_31bf3856ad3
64e35_6.1.7600.17056_none_0c028eeb985156ba.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 700
INFO | MFT record first cluster --- 2023599
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_ff2f877a4b8f9444ecabf23062094256_31bf3856ad364e35_6.1
.7600.17056_none_0c028eeb985156ba.manifest
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142143
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_0f6e52fd9da8c747703963ad0f42dc29_31bf3856ad3
64e35_6.1.7600.21256_none_aa8e121ee288a409.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 2041031
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_0f6e52fd9da8c747703963ad0f42dc29_31bf3856ad364e35_6.1
.7600.21256_none_aa8e121ee288a409.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142144
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {7960C9EC-8C95-40FC-A509-8BAC1F3915F6}
INFO | MFT record parent dir --- 332
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {7960C9EC-8C95-40FC-A509-8BAC1F3915F6}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142145
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- InterCement.rar
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 820385
INFO | MFT record first cluster --- 4854809
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: InterCement.rar
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142146
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Levantamento_V1.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 279487
INFO | MFT record first cluster --- 7683276
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Levantamento_V1.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142147
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_793eb3e0c502c8e3d8f4ad0094f5fb56_31bf3856ad3
64e35_6.1.7600.17056_none_24eb29d5382e2835.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 2041061
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_793eb3e0c502c8e3d8f4ad0094f5fb56_31bf3856ad364e35_6.1
.7600.17056_none_24eb29d5382e2835.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142148
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- excel.cab
INFO | MFT record parent dir --- 142024
INFO | MFT record file size --- 8911056
INFO | MFT record first cluster --- 9263674
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: excel.cab
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142149
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 9530eeacd2e80b86d37ad9c407df01fa
INFO | MFT record parent dir --- 89254
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 9530eeacd2e80b86d37ad9c407df01fa
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142150
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Levantamento_V2 - Comentrios Andr.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 695570
INFO | MFT record first cluster --- 7944132
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Levantamento_V2 - Comentrios Andr.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142151
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_fbfd77b4c7765a6d8659494e5578e970_31bf3856ad3
64e35_6.1.7600.21256_none_4366a2984ae25faa.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 706
INFO | MFT record first cluster --- 2049747
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_fbfd77b4c7765a6d8659494e5578e970_31bf3856ad364e35_6.1
.7600.21256_none_4366a2984ae25faa.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142152
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_84d38e4021d9819a063b4048643183be_31bf3856ad3
64e35_6.1.7600.17056_none_8452ecdf0745efe2.manifest

INFO | MFT record parent dir --- 16200


INFO | MFT record file size --- 706
INFO | MFT record first cluster --- 2054845
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_84d38e4021d9819a063b4048643183be_31bf3856ad364e35_6.1
.7600.17056_none_8452ecdf0745efe2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142153
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Levantamento_V2.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 697531
INFO | MFT record first cluster --- 6556536
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Levantamento_V2.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142154
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- b726b3c457095a81f39721918f12434b4a7baa7ca3a51bd8d9
22d9e665710c18.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 13256
INFO | MFT record first cluster --- 1052963
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: b726b3c457095a81f39721918f12434b4a7baa7ca3a51bd8d922d9e6657
10c18.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142155
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- word.cab
INFO | MFT record parent dir --- 142149
INFO | MFT record file size --- 9274503
INFO | MFT record first cluster --- 9169727

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: word.cab
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142156
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- MSHist012012032220120323
INFO | MFT record parent dir --- 8207
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: MSHist012012032220120323
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142157
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- NonCritical_x64_8dd2a6bea57836935d86a299b4735d5c6f
632592_09f86a86
INFO | MFT record parent dir --- 21075
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: NonCritical_x64_8dd2a6bea57836935d86a299b4735d5c6f632592_09
f86a86
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142158
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_ccb3aa159d2fcfcab04ea53a473e1121_31bf3856ad3
64e35_6.1.7601.22044_none_eb09bf772e4bea12.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 698
INFO | MFT record first cluster --- 2065655
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_ccb3aa159d2fcfcab04ea53a473e1121_31bf3856ad364e35_6.1

.7601.22044_none_eb09bf772e4bea12.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142159
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- cc5c396251a509b5.dat
INFO | MFT record parent dir --- 91664
INFO | MFT record file size --- 1999
INFO | MFT record first cluster --- 6778707
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: cc5c396251a509b5.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142160
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Modelo Mapa da Qualidade (2).xls
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 717312
INFO | MFT record first cluster --- 8454218
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Modelo Mapa da Qualidade (2).xls
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142161
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- xlconv.cab
INFO | MFT record parent dir --- 142070
INFO | MFT record file size --- 7736281
INFO | MFT record first cluster --- 10061151
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: xlconv.cab
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142162
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142157
INFO | MFT record file size --- 2244
INFO | MFT record first cluster --- 176
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142163
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- d46a91c4b656d93b60d75536243bfd2d_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 2023114
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: d46a91c4b656d93b60d75536243bfd2d_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142164
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- PC-Intercement_Cliente_ Mapa da qualidade no Porta
L.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 189947
INFO | MFT record first cluster --- 8191531
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: PC-Intercement_Cliente_ Mapa da qualidade no PortaL.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142165
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- RelatrioMapaQualidade - Marcela Paparelli.doc
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 688128
INFO | MFT record first cluster --- 8399864
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: RelatrioMapaQualidade - Marcela Paparelli.doc
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142166
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_214f7c659cc33c3f392a74031d2917e5_31bf3856ad3
64e35_6.1.7601.17887_none_df5fa2382036d7f7.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 698
INFO | MFT record first cluster --- 2085580
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_214f7c659cc33c3f392a74031d2917e5_31bf3856ad364e35_6.1
.7601.17887_none_df5fa2382036d7f7.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142167
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- WERMGR.EXE-F439C551.pf
INFO | MFT record parent dir --- 8051
INFO | MFT record file size --- 15358
INFO | MFT record first cluster --- 106705
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: WERMGR.EXE-F439C551.pf
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142168
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Requests Portal de Clientes IC.xlsx

INFO | MFT record parent dir --- 142094


INFO | MFT record file size --- 11684
INFO | MFT record first cluster --- 1033841
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Requests Portal de Clientes IC.xlsx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142169
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_41380942a38c1c4265ed8f5e2ac1734a_31bf3856ad3
64e35_6.1.7601.22044_none_4c133d3694af2e8c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 711
INFO | MFT record first cluster --- 2094203
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_41380942a38c1c4265ed8f5e2ac1734a_31bf3856ad364e35_6.1
.7601.22044_none_4c133d3694af2e8c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142170
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Somatria da Estimativa.xlsx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 11245
INFO | MFT record first cluster --- 1059146
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Somatria da Estimativa.xlsx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142171
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_14dea395
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0

INFO | MFT record is directory --- 1


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
4dea395
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142172
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_ace2bb851e0214d1ef0536ff5f00fbf4_31bf3856ad3
64e35_6.1.7601.17887_none_1e48a5e35361ecb3.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 711
INFO | MFT record first cluster --- 2162203
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_ace2bb851e0214d1ef0536ff5f00fbf4_31bf3856ad364e35_6.1
.7601.17887_none_1e48a5e35361ecb3.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142173
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c1f82.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 11395072
INFO | MFT record first cluster --- 8851120
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c1f82.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142174
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 9eecf8563149f9165f3c0fcb239980a3046317f27f5473bc33
db90f3962d09bd.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 15513
INFO | MFT record first cluster --- 1058346
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: 9eecf8563149f9165f3c0fcb239980a3046317f27f5473bc33db90f3962


d09bd.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142175
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_e86763ec831e59c39211a3f56ce16548_31bf3856ad3
64e35_6.1.7601.22044_none_1e8da6bd3c731b56.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 700
INFO | MFT record first cluster --- 2254960
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_e86763ec831e59c39211a3f56ce16548_31bf3856ad364e35_6.1
.7601.22044_none_1e8da6bd3c731b56.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142176
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_0d83c26859c4162e0f50e63a0c842687_31bf3856ad3
64e35_6.1.7601.17887_none_36c2337c2d5a9d8c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 700
INFO | MFT record first cluster --- 2289892
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_0d83c26859c4162e0f50e63a0c842687_31bf3856ad364e35_6.1
.7601.17887_none_36c2337c2d5a9d8c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142177
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_01800be40f352f273826f2c39cffa780_31bf3856ad3
64e35_6.1.7601.22044_none_eb01e5b08795f850.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 2294591
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: amd64_01800be40f352f273826f2c39cffa780_31bf3856ad364e35_6.1


.7601.22044_none_eb01e5b08795f850.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142178
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_5dadb8dac45a0ef6cb789cf4e4bc009e_31bf3856ad3
64e35_6.1.7601.17887_none_c586cd70c012c9f2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 2319523
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_5dadb8dac45a0ef6cb789cf4e4bc009e_31bf3856ad364e35_6.1
.7601.17887_none_c586cd70c012c9f2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142179
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Sugesto para cadastro de caracterstica.docx
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 120131
INFO | MFT record first cluster --- 6583695
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Sugesto para cadastro de caracterstica.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142180
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_66801310127a1503ccc740a9fbdbaa59_31bf3856ad3
64e35_6.1.7601.22044_none_2252c06e02a95baf.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 706
INFO | MFT record first cluster --- 2322011
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_66801310127a1503ccc740a9fbdbaa59_31bf3856ad364e35_6.1
.7601.22044_none_2252c06e02a95baf.manifest

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142181
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_185975e61af4917687b399e27f652610_31bf3856ad3
64e35_6.1.7601.17887_none_a6bcff398f999e04.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 706
INFO | MFT record first cluster --- 2322306
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_185975e61af4917687b399e27f652610_31bf3856ad364e35_6.1
.7601.17887_none_a6bcff398f999e04.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142182
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219~31bf3856ad364e35~amd64~~6.1.
1.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 24238
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142183
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Usurios Projeto eCommer IC.txt
INFO | MFT record parent dir --- 142094
INFO | MFT record file size --- 187
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Usurios Projeto eCommer IC.txt
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142184
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219~31bf3856ad364e35~amd64~~6.1.
1.1.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 4017
INFO | MFT record first cluster --- 1038591
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.mum
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142185
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~
6.1.1.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 1038742
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~6.1.1.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142186
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~
6.1.1.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 24058
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~6.1.1.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142187
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 3150327427128e4da05020e2b9ea2dcd_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 5034005
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 3150327427128e4da05020e2b9ea2dcd_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142188
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~
6.1.1.1.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 3805
INFO | MFT record first cluster --- 2354614
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219_RTM~31bf3856ad364e35~amd64~~6.1.1.1.m
um
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142189
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.
1.1.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 13279
INFO | MFT record first cluster --- 1064062
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat
INFO
INFO
INFO
INFO

|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142190
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142191
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 142171
MFT record file size --- 1910
MFT record first cluster --- 6752092
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142192
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|

MFT record parent dir --- 8188


MFT record file size --- 13279
MFT record first cluster --- 34600
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat

MFT record parent dir --- 8159


MFT record file size --- 6364
MFT record first cluster --- 1039038
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_6_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!

INFO | --> read MFT record 142193


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0e7ed33d
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
e7ed33d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142194
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142193
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6752723
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142195
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0f56cc0c
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
f56cc0c
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142196
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142195
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6752724
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142197
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262
efa0df1f_08d2c1a0
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262efa0df1f_
08d2c1a0
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142198
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142197
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6752881
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142199
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

MFT record parent dir --- 20885


MFT record file size --- 1910
MFT record first cluster --- 6752882
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142200
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Material Edson
MFT record parent dir --- 142094
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Material Edson
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142201
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142202
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.

MFT record parent dir --- 8159


MFT record file size --- 15515
MFT record first cluster --- 1064500
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat

MFT record parent dir --- 8188


MFT record file size --- 15515
MFT record first cluster --- 33502

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142203
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 35001
MFT record file size --- 1910
MFT record first cluster --- 6752970
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142204
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142205
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Base de clientes_Mapa da Qualidade_Atualizao.xlsx
MFT record parent dir --- 142200
MFT record file size --- 40888
MFT record first cluster --- 1196505
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Base de clientes_Mapa da Qualidade_Atualizao.xlsx

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 7458
MFT record first cluster --- 1039088
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_7_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.mum

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142206
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_04bb12bc
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
4bb12bc
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142207
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0da6e150
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
da6e150
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142208
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~
6.1.1.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 1040095
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~6.1.1.1.c
at

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142209
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~
6.1.1.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 24023
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~6.1.1.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142210
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142207
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6752971
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142211
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0ed2f07d
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
ed2f07d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142212
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142211
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753065
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142213
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Correlao de produtos.xlsx
INFO | MFT record parent dir --- 142200
INFO | MFT record file size --- 10647
INFO | MFT record first cluster --- 1059968
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Correlao de produtos.xlsx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142214
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0bab0055
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
bab0055
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142215


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142214
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753382
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142216
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_5a613125f6477faae51b0e52577cd536
fd02ae3_170287eb
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_5a613125f6477faae51b0e52577cd536fd02ae3_1
70287eb
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142217
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_039a83f5
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
39a83f5
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142218
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142217
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753383
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142219
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142216
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753909
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142220
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142206
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753993
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142221
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~
6.1.1.1.mum
INFO | MFT record parent dir --- 8159

INFO
INFO
INFO
INFO
INFO

|
|
|
|
|

MFT record file size --- 2807


MFT record first cluster --- 2356404
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2705219_SP1~31bf3856ad364e35~amd64~~6.1.1.1.m

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142222
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142223
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MapaQualidade_Informacoes_Embalagem_Cores.xlsx
MFT record parent dir --- 142200
MFT record file size --- 20574
MFT record first cluster --- 4301030
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: MapaQualidade_Informacoes_Embalagem_Cores.xlsx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142224
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.

um

MFT record parent dir --- 8159


MFT record file size --- 13256
MFT record first cluster --- 1064937
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat

MFT record parent dir --- 8188


MFT record file size --- 13256
MFT record first cluster --- 33375

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142225
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Email Edson
INFO | MFT record parent dir --- 142200
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Email Edson
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142226
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_177f1d08
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
77f1d08
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142227
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142226
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6753994
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
4.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142228
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2722913~31bf3856ad364e35~amd64~~9.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142229
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142230
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.

MFT record parent dir --- 8188


MFT record file size --- 777966
MFT record first cluster --- 525984
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2722913~31bf3856ad364e35~amd64~~9.4.1.0.cat

MFT record parent dir --- 8159


MFT record file size --- 6969
MFT record first cluster --- 1040464
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.mum

MFT record parent dir --- 8159


MFT record file size --- 15513
MFT record first cluster --- 1149083
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142231
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Email Edson.docx
MFT record parent dir --- 142225
MFT record file size --- 121830
MFT record first cluster --- 8010128
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Email Edson.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142232
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142233
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.

MFT record parent dir --- 8188


MFT record file size --- 15513
MFT record first cluster --- 26223
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.cat

MFT record parent dir --- 8159


MFT record file size --- 7850
MFT record first cluster --- 1040514
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_3_for_KB2705219~31bf3856ad364e35~amd64~~6.1.1.1.mum

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142234
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- image003.png
MFT record parent dir --- 142225
MFT record file size --- 16678
MFT record first cluster --- 1155217
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: image003.png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142235
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {4E40FAD9-A8E4-413A-8ACA-307DFABC5006}
MFT record parent dir --- 332
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: {4E40FAD9-A8E4-413A-8ACA-307DFABC5006}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142236
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 30243541_119885173.back.xml
MFT record parent dir --- 8160
MFT record file size --- 3900
MFT record first cluster --- 2358915
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 30243541_119885173.back.xml
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142237
Mft read mode is FAST

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Try to apply Sector Fixups


End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MPSIGSTUB.EXE-5D0450B3.pf
MFT record parent dir --- 8051
MFT record file size --- 22154
MFT record first cluster --- 1023220
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: MPSIGSTUB.EXE-5D0450B3.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142238
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000846
MFT record parent dir --- 88398
MFT record file size --- 308904
MFT record first cluster --- 8436707
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000846
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142239
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- image004.png
MFT record parent dir --- 142225
MFT record file size --- 29139
MFT record first cluster --- 4263347
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: image004.png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142240
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- image005.png
MFT record parent dir --- 142225
MFT record file size --- 61698

INFO | MFT record first cluster --- 6766095


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: image005.png
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142241
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- NTUSER.DAT{2a8b5323-e726-11e1-8418-463500000031}.T
MContainer00000000000000000002.regtrans-ms
INFO | MFT record parent dir --- 8078
INFO | MFT record file size --- 524288
INFO | MFT record first cluster --- 8984708
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: NTUSER.DAT{2a8b5323-e726-11e1-8418-463500000031}.TMContaine
r00000000000000000002.regtrans-ms
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142242
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Modelo Mapa da Qualidade.xls
INFO | MFT record parent dir --- 142225
INFO | MFT record file size --- 717312
INFO | MFT record first cluster --- 8039094
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Modelo Mapa da Qualidade.xls
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142243
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- bthport.sys
INFO | MFT record parent dir --- 146769
INFO | MFT record file size --- 552448
INFO | MFT record first cluster --- 8980690
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: bthport.sys

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 146769 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l
INFO | Object was successfully constructed - l
INFO | file name: amd64_bth.inf_31bf3856ad364e35_6.1.7600.17058_none_ce5d0a0a
d527589a - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142244
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- misc.exe
INFO | MFT record parent dir --- 133978
INFO | MFT record file size --- 217864
INFO | MFT record first cluster --- 8439843
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: misc.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142245
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- bthport.sys
INFO | MFT record parent dir --- 146736
INFO | MFT record file size --- 552960
INFO | MFT record first cluster --- 1150972
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: bthport.sys
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 146736 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l

INFO | Object was successfully constructed - l


INFO | file name: amd64_bth.inf_31bf3856ad364e35_6.1.7601.17889_none_d024215a
d264fb95 - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142246
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Documentos Marcela
INFO | MFT record parent dir --- 142053
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Documentos Marcela
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142247
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- pubs.exe
INFO | MFT record parent dir --- 133978
INFO | MFT record file size --- 272648
INFO | MFT record first cluster --- 8290057
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: pubs.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142248
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- bthport.sys
INFO | MFT record parent dir --- 147338
INFO | MFT record file size --- 552960
INFO | MFT record first cluster --- 8973296
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: bthport.sys
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 147338 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l
INFO | Object was successfully constructed - l
INFO | file name: amd64_bth.inf_31bf3856ad364e35_6.1.7601.22046_none_d0d5d519
eb6512d8 - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142249
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0009c0
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 32103
INFO | MFT record first cluster --- 8263184
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0009c0
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142250
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- show[3].js
INFO | MFT record parent dir --- 3065
INFO | MFT record file size --- 2249
INFO | MFT record first cluster --- 6754142
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: show[3].js
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142251
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Anlise de Demanda ABAP_V2.docx

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 142246


MFT record file size --- 18598
MFT record first cluster --- 2422239
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Anlise de Demanda ABAP_V2.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142252
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- BTHUSB.SYS
MFT record parent dir --- 147338
MFT record file size --- 80384
MFT record first cluster --- 4469836
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: BTHUSB.SYS
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142253
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Esquema_desenvolvimento.ppt
MFT record parent dir --- 142246
MFT record file size --- 148992
MFT record first cluster --- 5286831
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Esquema_desenvolvimento.ppt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142254
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000845
MFT record parent dir --- 88398
MFT record file size --- 32420
MFT record first cluster --- 2383240
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000845

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142255
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {DD76F568-61D4-4268-92E5-33C38CFFB6A1}
MFT record parent dir --- 98209
MFT record file size --- 7396
MFT record first cluster --- 1040523
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: {DD76F568-61D4-4268-92E5-33C38CFFB6A1}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142256
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000db2
MFT record parent dir --- 88398
MFT record file size --- 41275
MFT record first cluster --- 5348364
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000db2
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142257
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Mapa da Qualidade.png
MFT record parent dir --- 142246
MFT record file size --- 10905
MFT record first cluster --- 1060066
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Mapa da Qualidade.png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!

INFO | --> read MFT record 142258


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 0705f2c9fc3347ef516fd7f57e258ebd_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 1728235
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 0705f2c9fc3347ef516fd7f57e258ebd_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142259
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000847
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 18435
INFO | MFT record first cluster --- 1085896
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000847
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142260
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0008ac
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 84077
INFO | MFT record first cluster --- 8234568
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0008ac
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142261
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- system_drawing_dll_amd64


MFT record parent dir --- 129799
MFT record file size --- 607064
MFT record first cluster --- 6553389
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: system_drawing_dll_amd64
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142262
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {D3D42BBC-03D1-4930-8C81-B436D08AB8A9}
MFT record parent dir --- 98209
MFT record file size --- 7536
MFT record first cluster --- 311027
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: {D3D42BBC-03D1-4930-8C81-B436D08AB8A9}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142263
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Modelo Mapa da Qualidade (4).xlsx
MFT record parent dir --- 142246
MFT record file size --- 299300
MFT record first cluster --- 8301167
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Modelo Mapa da Qualidade (4).xlsx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142264
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- cagicon.exe
MFT record parent dir --- 133978
MFT record file size --- 20240
MFT record first cluster --- 1087274
MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: cagicon.exe


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142265
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c2058.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 9892352
INFO | MFT record first cluster --- 8141109
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c2058.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142266
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- BTHUSB.SYS
INFO | MFT record parent dir --- 146761
INFO | MFT record file size --- 80384
INFO | MFT record first cluster --- 4527632
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: BTHUSB.SYS
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142267
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 8e16f8a5e32899b2aa0c534ddf1eb5f0_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 5459992
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 8e16f8a5e32899b2aa0c534ddf1eb5f0_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142268
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c206f.msp
MFT record parent dir --- 7875
MFT record file size --- 1795584
MFT record first cluster --- 5453751
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c206f.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142269
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- mspicons.exe
MFT record parent dir --- 133978
MFT record file size --- 18704
MFT record first cluster --- 1095867
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: mspicons.exe
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142270
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ad8617286dee8893.dat
MFT record parent dir --- 127797
MFT record file size --- 3802
MFT record first cluster --- 5302586
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ad8617286dee8893.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142271
Mft read mode is FAST

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Try to apply Sector Fixups


End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MSPUB.EXE
MFT record parent dir --- 130075
MFT record file size --- 9570160
MFT record first cluster --- 10620987
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: MSPUB.EXE
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142272
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- wordicon.exe
MFT record parent dir --- 133978
MFT record file size --- 888080
MFT record first cluster --- 344865
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: wordicon.exe
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142273
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PRTF9.DLL
MFT record parent dir --- 130075
MFT record file size --- 135056
MFT record first cluster --- 7944959
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PRTF9.DLL
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142274
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Questes alinhamento Edson 11042012.docx
MFT record parent dir --- 142246
MFT record file size --- 14041

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 6786324


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Questes alinhamento Edson 11042012.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142275
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PTXT9.DLL
MFT record parent dir --- 130075
MFT record file size --- 625552
MFT record first cluster --- 5242317
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PTXT9.DLL
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142276
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- sprite_inbox_v3_icon[1].png
MFT record parent dir --- 127135
MFT record file size --- 2524
MFT record first cluster --- 3515920
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: sprite_inbox_v3_icon[1].png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142277
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PUBCONV.DLL
MFT record parent dir --- 130075
MFT record file size --- 593288
MFT record first cluster --- 2318900
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PUBCONV.DLL
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142278
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- RelatrioMapaQualidade.doc
MFT record parent dir --- 142246
MFT record file size --- 688128
MFT record first cluster --- 8730530
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: RelatrioMapaQualidade.doc
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142279
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PUBTRAP.DLL
MFT record parent dir --- 130075
MFT record file size --- 47496
MFT record first cluster --- 1160815
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PUBTRAP.DLL
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142280
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Demanda de cliente PR
MFT record parent dir --- 136126
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Demanda de cliente PR
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142281
Mft read mode is FAST

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Try to apply Sector Fixups


End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0008ab
MFT record parent dir --- 88398
MFT record file size --- 16501
MFT record first cluster --- 1113712
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0008ab
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142282
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2174.msp
MFT record parent dir --- 7875
MFT record file size --- 579072
MFT record first cluster --- 7401846
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2174.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142283
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2094.msp
MFT record parent dir --- 7875
MFT record file size --- 11592192
MFT record first cluster --- 8176152
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2094.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142284
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_00115d
MFT record parent dir --- 88398
MFT record file size --- 28530

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
3.1.cat
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 219545


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_00115d
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142285
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- NWSAPSETUPUSERNOTIFICATIONTOO-E75EAA9B.pf
MFT record parent dir --- 8051
MFT record file size --- 22526
MFT record first cluster --- 7953400
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: NWSAPSETUPUSERNOTIFICATIONTOO-E75EAA9B.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142286
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- show[1].js
MFT record parent dir --- 3052
MFT record file size --- 2478
MFT record first cluster --- 6754143
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: show[1].js
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142287
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.

|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 7700
MFT record first cluster --- 3755837
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142288
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- TFRC2D5.tmp
INFO | MFT record parent dir --- 333
INFO | MFT record file size --- 28670
INFO | MFT record first cluster --- 1116971
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: TFRC2D5.tmp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142289
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 7d69849dd71e83c5092533099431ca06_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 2023143
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 7d69849dd71e83c5092533099431ca06_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142290
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001252
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 59588
INFO | MFT record first cluster --- 9737789
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001252
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142291
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- A6C64DD86500CEF47BA082BB611A1FF1
INFO | MFT record parent dir --- 7877
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: A6C64DD86500CEF47BA082BB611A1FF1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142292
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 15.4.2862
INFO | MFT record parent dir --- 142291
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 15.4.2862
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142293
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ul_policy.30729.4148.policy_9_0_Microsoft_VC90_CRT
_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC
INFO | MFT record parent dir --- 142292
INFO | MFT record file size --- 764
INFO | MFT record first cluster --- 2066992
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ul_policy.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.
EB5BA578_FF7F_3863_8E53_7A003222B7FC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142294
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Sugesto para cadastro de caracterstica.docx
INFO | MFT record parent dir --- 142246
INFO | MFT record file size --- 120131
INFO | MFT record first cluster --- 7992106
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Sugesto para cadastro de caracterstica.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142295
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 310081BC000201439E24
INFO | MFT record parent dir --- 98039
INFO | MFT record file size --- 2
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 310081BC000201439E24
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142296
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ul_catalog.30729.4148.policy_9_0_Microsoft_VC90_CR
T_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC
INFO | MFT record parent dir --- 142292
INFO | MFT record file size --- 7522
INFO | MFT record first cluster --- 2078114
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ul_catalog.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE
.EB5BA578_FF7F_3863_8E53_7A003222B7FC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142297
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 30243541_3424464184.xml
INFO | MFT record parent dir --- 8160

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record file size --- 8801


MFT record first cluster --- 1040644
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 30243541_3424464184.xml
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142298
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Notas
MFT record parent dir --- 312
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Notas
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142299
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c210e.msp
MFT record parent dir --- 7875
MFT record file size --- 1373696
MFT record first cluster --- 7683364
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c210e.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142300
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- NF UNIQUE 89.pdf
MFT record parent dir --- 142298
MFT record file size --- 27840
MFT record first cluster --- 6556728
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: NF UNIQUE 89.pdf
Constructing node entry for MFT entry

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Node entry for MFT entry was successfully constructed


Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142301
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Exit.doc
MFT record parent dir --- 124730
MFT record file size --- 72192
MFT record first cluster --- 2422599
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Exit.doc
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142302
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {95148587-FC06-4EA6-B42E-E5799CEC912B}
MFT record parent dir --- 332
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: {95148587-FC06-4EA6-B42E-E5799CEC912B}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142303
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- NF Unique 84.pdf
MFT record parent dir --- 142298
MFT record file size --- 54451
MFT record first cluster --- 5403176
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: NF Unique 84.pdf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142304

INFO | Mft read mode is FAST


INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Thumbs.db
INFO | MFT record parent dir --- 142246
INFO | MFT record file size --- 6144
INFO | MFT record first cluster --- 2039973
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Thumbs.db
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142305
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001111
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 25754
INFO | MFT record first cluster --- 5086257
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001111
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142306
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- AppCrash_iexplore.exe_834a42b28086f3c57d15da39133b
9eafe9b5bf_1b010384
INFO | MFT record parent dir --- 21075
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: AppCrash_iexplore.exe_834a42b28086f3c57d15da39133b9eafe9b5b
f_1b010384
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142307
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record name --- Levantamento_V1


MFT record parent dir --- 142246
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Levantamento_V1
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142308
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Levantamento_V1.docx
MFT record parent dir --- 142307
MFT record file size --- 512480
MFT record first cluster --- 8421526
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Levantamento_V1.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142309
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c234a.msp
MFT record parent dir --- 7875
MFT record file size --- 4985856
MFT record first cluster --- 6801070
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c234a.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142310
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- sprite_inbox_v2_bg[1].png
MFT record parent dir --- 127231
MFT record file size --- 282
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

file name: sprite_inbox_v2_bg[1].png


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142311
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- OUTLOOK_COL.HXC_1046
MFT record parent dir --- 130590
MFT record file size --- 631
MFT record first cluster --- 6585270
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OUTLOOK_COL.HXC_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142312
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001106
MFT record parent dir --- 88398
MFT record file size --- 59745
MFT record first cluster --- 478225
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001106
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142313
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Levantamento_V2.docx
MFT record parent dir --- 142307
MFT record file size --- 758754
MFT record first cluster --- 8714924
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Levantamento_V2.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142314
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ASSA_IN_001_V2 - Ferramenta de gesto
INFO | MFT record parent dir --- 146823
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ASSA_IN_001_V2 - Ferramenta de gesto
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 146823 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l
INFO | Object was successfully constructed - l
INFO | file name: _INTERNOS - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142315
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {f6893dea-f0fe-11e1-8ff5-c53c45a95540}{3808876b-c1
76-4e48-b7ae-04046e6cc752}
INFO | MFT record parent dir --- 63766
INFO | MFT record file size --- 1081049088
INFO | MFT record first cluster --- 60517872
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {f6893dea-f0fe-11e1-8ff5-c53c45a95540}{3808876b-c176-4e48-b
7ae-04046e6cc752}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142316
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c215e.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 2531840

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 5535922


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c215e.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142317
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Especificao Tcnica V2.docx
MFT record parent dir --- 142314
MFT record file size --- 59146
MFT record first cluster --- 2616821
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Especificao Tcnica V2.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142318
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PM210 Proposta tcnica - ASSA_IN_001_V2.docx
MFT record parent dir --- 142314
MFT record file size --- 813715
MFT record first cluster --- 5517466
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PM210 Proposta tcnica - ASSA_IN_001_V2.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142319
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c218b.msp
MFT record parent dir --- 7875
MFT record file size --- 2237952
MFT record first cluster --- 7800364
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c218b.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142320
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..ng-spooler-splwow64_31bf3
856ad364e35_6.1.7601.21921_none_ca2d8d9909622d19.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1846
INFO | MFT record first cluster --- 2365667
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad364e
35_6.1.7601.21921_none_ca2d8d9909622d19.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142321
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..ng-spooler-splwow64_31bf3
856ad364e35_6.1.7601.17777_none_c973e107f067b3e7.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1846
INFO | MFT record first cluster --- 2383215
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad364e
35_6.1.7601.17777_none_c973e107f067b3e7.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142322
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..ng-spooler-splwow64_31bf3
856ad364e35_6.1.7600.21149_none_c83969470c44f9e2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1846
INFO | MFT record first cluster --- 2424396
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad364e
35_6.1.7600.21149_none_c83969470c44f9e2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142323
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c230f.msp
MFT record parent dir --- 7875
MFT record file size --- 3457024
MFT record first cluster --- 7939146
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c230f.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142324
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- OUTLOOK_COL.HXT_1046
MFT record parent dir --- 130590
MFT record file size --- 207
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OUTLOOK_COL.HXT_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142325
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- OUTLOOK_K_COL.HXK_1046
MFT record parent dir --- 130590
MFT record file size --- 113
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OUTLOOK_K_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142326
Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- OLFM10.CHM_1046
INFO | MFT record parent dir --- 130590
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: OLFM10.CHM_1046
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142327
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..ng-spooler-splwow64_31bf3
856ad364e35_6.1.7600.16962_none_c793527bf33dad57.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1846
INFO | MFT record first cluster --- 2596639
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad364e
35_6.1.7600.16962_none_c793527bf33dad57.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142328
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c2289.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 2247168
INFO | MFT record first cluster --- 4907593
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c2289.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142329
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- OUTLOOK_F_COL.HXK_1046

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 130590


MFT record file size --- 114
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OUTLOOK_F_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142330
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1399726[1].jpg
MFT record parent dir --- 127135
MFT record file size --- 1216
MFT record first cluster --- 4030764
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1399726[1].jpg
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142331
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- EXCEL_COL.HXC_1046
MFT record parent dir --- 130541
MFT record file size --- 621
MFT record first cluster --- 5524403
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: EXCEL_COL.HXC_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142332
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c21a7.msp
MFT record parent dir --- 7875
MFT record file size --- 4225536
MFT record first cluster --- 5632144
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c21a7.msp

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142333
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7601.21921_none_a269bc2dd512b759.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10426
INFO | MFT record first cluster --- 1041092
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7601.21921_none_a269bc2dd512b759.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142334
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7601.17777_none_a1b00f9cbc183e27.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10426
INFO | MFT record first cluster --- 1044061
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7601.17777_none_a1b00f9cbc183e27.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142335
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7600.21149_none_a07597dbd7f58422.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10426
INFO | MFT record first cluster --- 1044277
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7600.21149_none_a07597dbd7f58422.manifest

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142336
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7600.16962_none_9fcf8110beee3797.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10426
INFO | MFT record first cluster --- 1046896
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7600.16962_none_9fcf8110beee3797.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142337
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7600.16962_none_957ad6be8a8d759c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10428
INFO | MFT record first cluster --- 1046952
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7600.16962_none_957ad6be8a8d759c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142338
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00115e
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 17160
INFO | MFT record first cluster --- 514084
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00115e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142339
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7601.17777_none_975b654a87b77c2c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10428
INFO | MFT record first cluster --- 1047875
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7601.17777_none_975b654a87b77c2c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142340
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7600.21149_none_9620ed89a394c227.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10428
INFO | MFT record first cluster --- 1047959
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7600.21149_none_9620ed89a394c227.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142341
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00100c
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 168292
INFO | MFT record first cluster --- 8223864
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00100c
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142342
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Thumbs.db
INFO | MFT record parent dir --- 128783
INFO | MFT record file size --- 9728
INFO | MFT record first cluster --- 4300942
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Thumbs.db
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142343
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 19dc0eb8fd3b4e63.dat
INFO | MFT record parent dir --- 123397
INFO | MFT record file size --- 10634
INFO | MFT record first cluster --- 1033277
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 19dc0eb8fd3b4e63.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142344
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7601.21921_none_8ebd351dc2760a47.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 4845
INFO | MFT record first cluster --- 1132761
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7601.21921_none_8ebd351dc2760a47.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142345
INFO | Mft read mode is FAST

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Try to apply Sector Fixups


End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000fcf
MFT record parent dir --- 88398
MFT record file size --- 72374
MFT record first cluster --- 293112
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fcf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142346
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- aaaaoggiphohkihibdkcnhnokmkfmhnj_7.14.1.0.crx
MFT record parent dir --- 136716
MFT record file size --- 174938
MFT record first cluster --- 6766202
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: aaaaoggiphohkihibdkcnhnokmkfmhnj_7.14.1.0.crx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142347
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001105
MFT record parent dir --- 88398
MFT record file size --- 65114
MFT record first cluster --- 15176
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001105
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142348
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Proposta tcnica.docx
MFT record parent dir --- 135409
MFT record file size --- 4294123

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 9585414


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Proposta tcnica.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142349
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- BACKUP_TESTE_ANLP_ANLC.xls
MFT record parent dir --- 128654
MFT record file size --- 15360
MFT record first cluster --- 3519280
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: BACKUP_TESTE_ANLP_ANLC.xls
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142350
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Proposta tcnica_V2.docx
MFT record parent dir --- 128654
MFT record file size --- 977996
MFT record first cluster --- 6765624
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Proposta tcnica_V2.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142351
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Diversos
MFT record parent dir --- 128654
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Diversos
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142352
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Anlise Problema ANLP.docx
MFT record parent dir --- 142351
MFT record file size --- 392948
MFT record first cluster --- 8108404
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Anlise Problema ANLP.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142353
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Cenrio ANLP X ANLC.xlsx
MFT record parent dir --- 142351
MFT record file size --- 32274
MFT record first cluster --- 4310932
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Cenrio ANLP X ANLC.xlsx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142354
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Cenrio CCD 300.docx
MFT record parent dir --- 142351
MFT record file size --- 68679
MFT record first cluster --- 2022257
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Cenrio CCD 300.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142355
Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {751722fc-37d9-4fb6-92a6-5241341871a6}
INFO | MFT record parent dir --- 9242
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {751722fc-37d9-4fb6-92a6-5241341871a6}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142356
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- snapshot.etl
INFO | MFT record parent dir --- 142355
INFO | MFT record file size --- 311296
INFO | MFT record first cluster --- 10553560
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: snapshot.etl
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142357
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7601.17777_none_8e03888ca97b9115.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 4845
INFO | MFT record first cluster --- 1132889
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7601.17777_none_8e03888ca97b9115.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142358
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0012a8

INFO | MFT record parent dir --- 88398


INFO | MFT record file size --- 25825
INFO | MFT record first cluster --- 8076326
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0012a8
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142359
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- sqmnoopt02.sqm
INFO | MFT record parent dir --- 124305
INFO | MFT record file size --- 508
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: sqmnoopt02.sqm
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142360
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ZBR_ETIQUETA_20.txt
INFO | MFT record parent dir --- 312
INFO | MFT record file size --- 484
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ZBR_ETIQUETA_20.txt
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142361
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7600.21149_none_8cc910cbc558d710.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 4845
INFO | MFT record first cluster --- 1133785
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36


4e35_6.1.7600.21149_none_8cc910cbc558d710.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142362
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000dec
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 18354
INFO | MFT record first cluster --- 5244081
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000dec
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142363
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- System.Core.ni.dll
INFO | MFT record parent dir --- 121320
INFO | MFT record file size --- 3337728
INFO | MFT record first cluster --- 5526795
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: System.Core.ni.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142364
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-printing-spooler-core_31bf
3856ad364e35_6.1.7601.21921_none_34ed7a43f150b682.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 207260
INFO | MFT record first cluster --- 4801892
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-printing-spooler-core_31bf3856ad364
e35_6.1.7601.21921_none_34ed7a43f150b682.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142365
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {F5D8355D-ABF5-463B-B781-7C6107C55279}
INFO | MFT record parent dir --- 332
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {F5D8355D-ABF5-463B-B781-7C6107C55279}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142366
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7600.16962_none_8c22fa00ac518a85.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 4845
INFO | MFT record first cluster --- 1134814
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7600.16962_none_8c22fa00ac518a85.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142367
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {2DD498FF-5BEA-4A23-8E8E-D6598438BA6B}
INFO | MFT record parent dir --- 332
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {2DD498FF-5BEA-4A23-8E8E-D6598438BA6B}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142368


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-printing-spooler-core_31bf
3856ad364e35_6.1.7601.17777_none_3433cdb2d8563d50.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 207260
INFO | MFT record first cluster --- 4849803
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-printing-spooler-core_31bf3856ad364
e35_6.1.7601.17777_none_3433cdb2d8563d50.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142369
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001108
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 36579
INFO | MFT record first cluster --- 32636
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001108
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142370
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001109
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 70479
INFO | MFT record first cluster --- 111563
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001109
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142371
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ng-spooler-splwow64_31b


f3856ad364e35_6.1.7601.21921_none_264c291cc1bf9e4f.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2644
INFO | MFT record first cluster --- 3499673
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad36
4e35_6.1.7601.21921_none_264c291cc1bf9e4f.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142372
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- MSHist012012030820120309
INFO | MFT record parent dir --- 8207
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: MSHist012012030820120309
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142373
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-printing-spooler-core_31bf
3856ad364e35_6.1.7600.21149_none_32f955f1f433834b.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 207260
INFO | MFT record first cluster --- 4853465
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-printing-spooler-core_31bf3856ad364
e35_6.1.7600.21149_none_32f955f1f433834b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142374
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00110d

INFO | MFT record parent dir --- 88398


INFO | MFT record file size --- 25636
INFO | MFT record first cluster --- 111581
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00110d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142375
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- usagovrssfeed[1].rss
INFO | MFT record parent dir --- 3052
INFO | MFT record file size --- 970
INFO | MFT record first cluster --- 1117958
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: usagovrssfeed[1].rss
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142376
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ng-spooler-splwow64_31b
f3856ad364e35_6.1.7601.17777_none_25927c8ba8c5251d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2644
INFO | MFT record first cluster --- 3766759
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad36
4e35_6.1.7601.17777_none_25927c8ba8c5251d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142377
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-printing-spooler-core_31bf
3856ad364e35_6.1.7600.16962_none_32533f26db2c36c0.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 207260
INFO | MFT record first cluster --- 2319048

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-printing-spooler-core_31bf3856ad364
e35_6.1.7600.16962_none_32533f26db2c36c0.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142378
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001162
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 22688
INFO | MFT record first cluster --- 89479
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001162
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142379
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- zcl_im_set_block_c_reg_c00====cm00s
INFO | MFT record parent dir --- 107064
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: zcl_im_set_block_c_reg_c00====cm00s
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142380
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ng-spooler-splwow64_31b
f3856ad364e35_6.1.7600.21149_none_245804cac4a26b18.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2644
INFO | MFT record first cluster --- 4293690
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad36
4e35_6.1.7600.21149_none_245804cac4a26b18.manifest

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142381
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-networkclient_31b
f3856ad364e35_6.1.7601.21921_none_981511dba0b1f55e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 10428
INFO | MFT record first cluster --- 1052109
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-networkclient_31bf3856ad36
4e35_6.1.7601.21921_none_981511dba0b1f55e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142382
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {aebf2536-6f8f-426b-b8e7-97974bdcd808}
INFO | MFT record parent dir --- 9242
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {aebf2536-6f8f-426b-b8e7-97974bdcd808}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142383
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- index.dat
INFO | MFT record parent dir --- 142372
INFO | MFT record file size --- 32768
INFO | MFT record first cluster --- 4311001
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: index.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142384
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- EXCEL_F_COL.HXK_1046
MFT record parent dir --- 130541
MFT record file size --- 114
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: EXCEL_F_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142385
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Sftplaylh.sys
MFT record parent dir --- 8230
MFT record file size --- 268648
MFT record first cluster --- 5239148
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Sftplaylh.sys
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142386
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Sftredirlh.sys
MFT record parent dir --- 8230
MFT record file size --- 25960
MFT record first cluster --- 2453070
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Sftredirlh.sys
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142387
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer


INFO | MFT record parent dir --- 142306
INFO | MFT record file size --- 35904
INFO | MFT record first cluster --- 1443
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142388
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 6497884a2c16ec3d.dat
INFO | MFT record parent dir --- 142000
INFO | MFT record file size --- 8493
INFO | MFT record first cluster --- 3410331
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 6497884a2c16ec3d.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142389
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 12289d00e41c30ed2f90ac87580c7145_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 55185
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 12289d00e41c30ed2f90ac87580c7145_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142390
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ng-spooler-splwow64_31b
f3856ad364e35_6.1.7600.16962_none_23b1edffab9b1e8d.manifest
INFO | MFT record parent dir --- 16200

INFO | MFT record file size --- 2644


INFO | MFT record first cluster --- 4384152
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ng-spooler-splwow64_31bf3856ad36
4e35_6.1.7600.16962_none_23b1edffab9b1e8d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142391
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- XLMAIN11.CHM_1046
INFO | MFT record parent dir --- 130541
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: XLMAIN11.CHM_1046
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142392
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000de2
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 155254
INFO | MFT record first cluster --- 9209672
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000de2
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142393
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000df9
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 17910
INFO | MFT record first cluster --- 7505718
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000df9

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142394
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 5913a383-5dd9b74f
INFO | MFT record parent dir --- 110098
INFO | MFT record file size --- 2638
INFO | MFT record first cluster --- 2023439
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 5913a383-5dd9b74f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142395
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {8B89C1A9-82D0-4BC7-AB09-68C3D1B8B194}
INFO | MFT record parent dir --- 332
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {8B89C1A9-82D0-4BC7-AB09-68C3D1B8B194}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142396
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 024a32b355c9f9737564650eedb4b7ba_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 2418762
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 024a32b355c9f9737564650eedb4b7ba_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142397
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {66A21EB1-EF8C-48FB-8F1A-3D42B2F65403}
MFT record parent dir --- 98209
MFT record file size --- 7560
MFT record first cluster --- 1033270
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: {66A21EB1-EF8C-48FB-8F1A-3D42B2F65403}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142398
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 0708ccb[1].jpg
MFT record parent dir --- 127231
MFT record file size --- 1217
MFT record first cluster --- 4082073
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 0708ccb[1].jpg
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142399
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- snapshot.etl
MFT record parent dir --- 142382
MFT record file size --- 344064
MFT record first cluster --- 976876
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: snapshot.etl
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142400
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- js[2].js


MFT record parent dir --- 127272
MFT record file size --- 20186
MFT record first cluster --- 3669574
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: js[2].js
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142401
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- bg_grey_dotted_h-line_3x1[1].png
MFT record parent dir --- 127272
MFT record file size --- 74
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: bg_grey_dotted_h-line_3x1[1].png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142402
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Lista BAPI.lnk
MFT record parent dir --- 325
MFT record file size --- 940
MFT record first cluster --- 1033447
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Lista BAPI.lnk
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142403
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 39c4871[1].jpg
MFT record parent dir --- 127275
MFT record file size --- 1114
MFT record first cluster --- 4187749
MFT record is directory --- 0

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------END OF MFT RECORD DUMP-----file name: 39c4871[1].jpg


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142404
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f66
MFT record parent dir --- 88398
MFT record file size --- 35145
MFT record first cluster --- 4392203
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f66
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142405
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
Passing the attribute assert
Attribute assert was successfully passed
--> read MFT record 142406
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- IETAG.DLL
MFT record parent dir --- 122293
MFT record file size --- 178560
MFT record first cluster --- 7951927
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: IETAG.DLL
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142407
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- #feedjit.com
MFT record parent dir --- 105996
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------END OF MFT RECORD DUMP-----file name: #feedjit.com


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142408
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 967681b5c19c9854.dat
MFT record parent dir --- 157375
MFT record file size --- 3407
MFT record first cluster --- 228172
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 967681b5c19c9854.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
read MFT record 157375 - l
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
Constructing the object - l
Object was successfully constructed - l
file name: 96 - l
Constructing node entry for MFT entry - l
Node entry for MFT entry was successfully constructed - l
Start of getting file parametres(size, time, date) - l
End of getting file parametres(size, time, date) - l
Getting parent dir entry num - l
End of getting parent dir for entry num - l
!!!---End the parsing loop---!!!
--> read MFT record 142409
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000e04
MFT record parent dir --- 88398
MFT record file size --- 31984
MFT record first cluster --- 58397
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000e04
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142410
Mft read mode is FAST
Try to apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of apply Sector Fixups


------MFT RECORD DUMP-----MFT record name --- EXCEL_COL.HXT_1046
MFT record parent dir --- 130541
MFT record file size --- 205
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: EXCEL_COL.HXT_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142411
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- EXCEL_K_COL.HXK_1046
MFT record parent dir --- 130541
MFT record file size --- 113
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: EXCEL_K_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142412
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- EXCEL.HXS
MFT record parent dir --- 130076
MFT record file size --- 9885403
MFT record first cluster --- 5661951
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: EXCEL.HXS
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142413
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2291.msp
MFT record parent dir --- 7875
MFT record file size --- 9976320
MFT record first cluster --- 7970801

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record is directory --- 0


------END OF MFT RECORD DUMP-----file name: 16c2291.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142414
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Microsoft Help
MFT record parent dir --- 6381
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Microsoft Help
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142415
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- OLMAIN11.CHM_1046
MFT record parent dir --- 130590
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OLMAIN11.CHM_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142416
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- OUTLOOK.HXS
MFT record parent dir --- 130076
MFT record file size --- 9739220
MFT record first cluster --- 6766369
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: OUTLOOK.HXS
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of getting file parametres(size, time, date)


!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142417
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2352.msp
MFT record parent dir --- 7875
MFT record file size --- 9844224
MFT record first cluster --- 2182395
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2352.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142418
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000dfc
MFT record parent dir --- 88398
MFT record file size --- 58981
MFT record first cluster --- 5412609
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000dfc
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142419
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- operadores-logicos.pdf
MFT record parent dir --- 119249
MFT record file size --- 111502
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: operadores-logicos.pdf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142420
Mft read mode is FAST
Try to apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of apply Sector Fixups


------MFT RECORD DUMP-----MFT record name --- zdnPM64S.dll
MFT record parent dir --- 8179
MFT record file size --- 111104
MFT record first cluster --- 3606714
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: zdnPM64S.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142421
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000dfb
MFT record parent dir --- 88398
MFT record file size --- 25675
MFT record first cluster --- 7730647
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000dfb
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142422
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- hpqddr000.log
MFT record parent dir --- 113003
MFT record file size --- 603
MFT record first cluster --- 1732792
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: hpqddr000.log
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142423
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000dfd
MFT record parent dir --- 88398
MFT record file size --- 39834
MFT record first cluster --- 5327693

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record is directory --- 0


------END OF MFT RECORD DUMP-----file name: f_000dfd
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142424
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2252.msp
MFT record parent dir --- 7875
MFT record file size --- 5907456
MFT record first cluster --- 7973793
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2252.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142425
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2253.msp
MFT record parent dir --- 7875
MFT record file size --- 4989952
MFT record first cluster --- 8093388
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2253.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142426
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- HPZIDS002.log
MFT record parent dir --- 113003
MFT record file size --- 396
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: HPZIDS002.log
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of getting file parametres(size, time, date)


!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142427
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- zdnPM64U.dll
MFT record parent dir --- 8179
MFT record file size --- 113664
MFT record first cluster --- 4748987
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: zdnPM64U.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142428
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- SIGNIN.EXE-B96791AD.pf
MFT record parent dir --- 8051
MFT record file size --- 89178
MFT record first cluster --- 943776
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: SIGNIN.EXE-B96791AD.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142429
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {D0D53808-93B6-4662-94C2-93B702243F00}
MFT record parent dir --- 98209
MFT record file size --- 7538
MFT record first cluster --- 1033540
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: {D0D53808-93B6-4662-94C2-93B702243F00}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142430
Mft read mode is FAST
Try to apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of apply Sector Fixups


------MFT RECORD DUMP-----MFT record name --- f_000dfe
MFT record parent dir --- 88398
MFT record file size --- 24461
MFT record first cluster --- 5254321
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000dfe
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142431
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000e05
MFT record parent dir --- 88398
MFT record file size --- 32371
MFT record first cluster --- 60339
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000e05
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142432
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MSHist012012083120120901
MFT record parent dir --- 8207
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: MSHist012012083120120901
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142433
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f6d
MFT record parent dir --- 88398
MFT record file size --- 20164
MFT record first cluster --- 97429

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000f6d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142434
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 9a2f0247822e600bb7d50241f9fc210c_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1511
INFO | MFT record first cluster --- 48974
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 9a2f0247822e600bb7d50241f9fc210c_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142435
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000f6e
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 27858
INFO | MFT record first cluster --- 8418392
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000f6e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142436
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- system_drawing_dll_x86
INFO | MFT record parent dir --- 129799
INFO | MFT record file size --- 607064
INFO | MFT record first cluster --- 8563975
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: system_drawing_dll_x86
INFO | Constructing node entry for MFT entry

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Node entry for MFT entry was successfully constructed


Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142437
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f62
MFT record parent dir --- 88398
MFT record file size --- 32290
MFT record first cluster --- 8256663
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f62
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142438
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- JAVA.EXE-2AB52D6A.pf
MFT record parent dir --- 8051
MFT record file size --- 22964
MFT record first cluster --- 8423362
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: JAVA.EXE-2AB52D6A.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142439
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ZDNdrv56.dll
MFT record parent dir --- 137810
MFT record file size --- 1025024
MFT record first cluster --- 5277044
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ZDNdrv56.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142441

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Mft read mode is FAST


Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f6f
MFT record parent dir --- 88398
MFT record file size --- 17229
MFT record first cluster --- 440954
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f6f
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142442
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- POWERPNT_COL.HXC_1046
MFT record parent dir --- 131173
MFT record file size --- 636
MFT record first cluster --- 6548751
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: POWERPNT_COL.HXC_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142443
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WINWORD_COL.HXC_1046
MFT record parent dir --- 131312
MFT record file size --- 631
MFT record first cluster --- 2422770
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WINWORD_COL.HXC_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142444
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WINWORD_F_COL.HXK_1046
MFT record parent dir --- 131312

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record file size --- 114


MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WINWORD_F_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142445
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WINWORD_COL.HXT_1046
MFT record parent dir --- 131312
MFT record file size --- 207
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WINWORD_COL.HXT_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142446
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c22ca.msp
MFT record parent dir --- 7875
MFT record file size --- 3738624
MFT record first cluster --- 7946074
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c22ca.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142447
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WDMAIN11.CHM_1046
MFT record parent dir --- 131312
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WDMAIN11.CHM_1046
Constructing node entry for MFT entry

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Node entry for MFT entry was successfully constructed


Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142448
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WINWORD_K_COL.HXK_1046
MFT record parent dir --- 131312
MFT record file size --- 113
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WINWORD_K_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142449
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WINWORD.HXS
MFT record parent dir --- 130076
MFT record file size --- 6434876
MFT record first cluster --- 9998721
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: WINWORD.HXS
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142450
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- index.dat
MFT record parent dir --- 142432
MFT record file size --- 32768
MFT record first cluster --- 44440
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: index.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142451

INFO | Mft read mode is FAST


INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000f71
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 29018
INFO | MFT record first cluster --- 7996995
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000f71
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142452
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001009
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 20086
INFO | MFT record first cluster --- 6826194
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001009
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142453
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ACRORD32.EXE-1066739E.pf
INFO | MFT record parent dir --- 8051
INFO | MFT record file size --- 98200
INFO | MFT record first cluster --- 8025334
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ACRORD32.EXE-1066739E.pf
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142454
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI8F364BAC08813247A54E0E1317074489
cp65001_67104f64

INFO
INFO
INFO
INFO
INFO
INFO
7104f64
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|

MFT record parent dir --- 102577


MFT record file size --- 560
MFT record first cluster --- 49646
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: DataP_sapvaluesetI8F364BAC08813247A54E0E1317074489cp65001_6

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142455
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f19
MFT record parent dir --- 88398
MFT record file size --- 39755
MFT record first cluster --- 357793
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f19
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142456
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 304268c9a9fe27b8.dat
MFT record parent dir --- 158567
MFT record file size --- 37081
MFT record first cluster --- 3766273
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 304268c9a9fe27b8.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142457
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000eec
MFT record parent dir --- 88398
MFT record file size --- 21140
MFT record first cluster --- 377582
MFT record is directory --- 0
------END OF MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

file name: f_000eec


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142458
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- snapshot.etl
MFT record parent dir --- 34869
MFT record file size --- 327680
MFT record first cluster --- 506454
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: snapshot.etl
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142459
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- DLLHOST.EXE-D49D3641.pf
MFT record parent dir --- 8051
MFT record file size --- 32854
MFT record first cluster --- 59524454
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: DLLHOST.EXE-D49D3641.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142460
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- CacheSize.txt
MFT record parent dir --- 131311
MFT record file size --- 6
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: CacheSize.txt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---End the parsing loop---!!!


--> read MFT record 142461
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f70
MFT record parent dir --- 88398
MFT record file size --- 92705
MFT record first cluster --- 122165
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f70
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142462
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- snapshot.etl
MFT record parent dir --- 38351
MFT record file size --- 311296
MFT record first cluster --- 8784900
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: snapshot.etl
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142463
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c235a.msp
MFT record parent dir --- 7875
MFT record file size --- 6519296
MFT record first cluster --- 6755381
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c235a.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142464
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record name --- PPMAIN10.CHM_0001_1046


MFT record parent dir --- 131173
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: PPMAIN10.CHM_0001_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142465
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- JAVAWS.EXE-B96890A4.pf
MFT record parent dir --- 8051
MFT record file size --- 35992
MFT record first cluster --- 9390763
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: JAVAWS.EXE-B96890A4.pf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142466
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001237
MFT record parent dir --- 88398
MFT record file size --- 25713
MFT record first cluster --- 945754
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001237
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142467
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- WSQMCONS.EXE-4048402C.pf
MFT record parent dir --- 8051
MFT record file size --- 2548
MFT record first cluster --- 8279191
MFT record is directory --- 0
------END OF MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

file name: WSQMCONS.EXE-4048402C.pf


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142468
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f91
MFT record parent dir --- 88398
MFT record file size --- 22227
MFT record first cluster --- 400357
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f91
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142469
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000fd1
MFT record parent dir --- 88398
MFT record file size --- 27039
MFT record first cluster --- 59590640
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fd1
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142470
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- POWERPNT_K_COL.HXK_1046
MFT record parent dir --- 131173
MFT record file size --- 113
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: POWERPNT_K_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---End the parsing loop---!!!


--> read MFT record 142471
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- POWERPNT_F_COL.HXK_1046
MFT record parent dir --- 131173
MFT record file size --- 114
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: POWERPNT_F_COL.HXK_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142472
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- POWERPNT_COL.HXT_1046
MFT record parent dir --- 131173
MFT record file size --- 208
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: POWERPNT_COL.HXT_1046
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142473
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2333.msp
MFT record parent dir --- 7875
MFT record file size --- 8311808
MFT record first cluster --- 10563498
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2333.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142474
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record name --- f_000ef8


MFT record parent dir --- 88398
MFT record file size --- 29020
MFT record first cluster --- 115100
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000ef8
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142475
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_00106f
MFT record parent dir --- 88398
MFT record file size --- 32885
MFT record first cluster --- 8958245
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_00106f
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142476
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c22f4.msp
MFT record parent dir --- 7875
MFT record file size --- 2516992
MFT record first cluster --- 7951125
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c22f4.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142477
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c22f5.msp
MFT record parent dir --- 7875
MFT record file size --- 3126272
MFT record first cluster --- 7986020
MFT record is directory --- 0
------END OF MFT RECORD DUMP------

INFO | file name: 16c22f5.msp


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142478
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00110a
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 62228
INFO | MFT record first cluster --- 9368392
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00110a
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142479
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 517ae47647d42951c544730400e5612aed222024048035e16b
81f1441f4e0547.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 15322
INFO | MFT record first cluster --- 1104443
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 517ae47647d42951c544730400e5612aed222024048035e16b81f1441f4
e0547.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142480
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_ba43a29eb783a7370a4c59920751fc19_31bf3856ad3
64e35_6.1.7601.21921_none_9bffe94f011badff.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 717
INFO | MFT record first cluster --- 5456850
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_ba43a29eb783a7370a4c59920751fc19_31bf3856ad364e35_6.1
.7601.21921_none_9bffe94f011badff.manifest
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142481
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_2ce5de6306f9b3aa4b0af119e73eb881_31bf3856ad3
64e35_6.1.7601.17777_none_5461b968f2546101.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 717
INFO | MFT record first cluster --- 5532200
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_2ce5de6306f9b3aa4b0af119e73eb881_31bf3856ad364e35_6.1
.7601.17777_none_5461b968f2546101.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142482
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- tt[1].htm
INFO | MFT record parent dir --- 3065
INFO | MFT record file size --- 541
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: tt[1].htm
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142483
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_5ae414ea58539d22aa40f3fd21687fbd_31bf3856ad3
64e35_6.1.7601.21921_none_07258dbabeaf4f4c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 5537072
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_5ae414ea58539d22aa40f3fd21687fbd_31bf3856ad364e35_6.1
.7601.21921_none_07258dbabeaf4f4c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142484
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_cfb555c02e010509164cb4c0b82d97cc_31bf3856ad3
64e35_6.1.7601.17777_none_56ea0741c04c2cdf.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 5537107
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_cfb555c02e010509164cb4c0b82d97cc_31bf3856ad364e35_6.1
.7601.17777_none_56ea0741c04c2cdf.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142485
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_1eb0c02a71e5f83355c2b96125bff369_31bf3856ad3
64e35_6.1.7601.21921_none_5279aeaa0d59a99d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 5566365
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_1eb0c02a71e5f83355c2b96125bff369_31bf3856ad364e35_6.1
.7601.21921_none_5279aeaa0d59a99d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142486
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_0b671628c028ac2de6d27e2adcf56a43_31bf3856ad3
64e35_6.1.7601.17777_none_3a38a5df60b01e60.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 5665160
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_0b671628c028ac2de6d27e2adcf56a43_31bf3856ad364e35_6.1
.7601.17777_none_3a38a5df60b01e60.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142487
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c2373.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 9404928
INFO | MFT record first cluster --- 8156768
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c2373.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142488
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- NonCritical_7.3.7600.16385_c04134d26c3f797c18c1987
16a9313cf1f7289_0b6aa51c
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: NonCritical_7.3.7600.16385_c04134d26c3f797c18c198716a9313cf
1f7289_0b6aa51c
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142489
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- direct;auc.4709041406463839232;ai.216574403.227441
569;ac.1344381815-4104379;wi.234;hi.60;cp.0[1].htm
INFO | MFT record parent dir --- 3052
INFO | MFT record file size --- 559
INFO | MFT record first cluster --- 2443862
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: direct;auc.4709041406463839232;ai.216574403.227441569;ac.13
44381815-4104379;wi.234;hi.60;cp.0[1].htm
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142490
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_cf139c6568973014f5fe08349cad674f_31bf3856ad3
64e35_6.1.7601.21921_none_05d1784dcbddd094.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 5665987
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_cf139c6568973014f5fe08349cad674f_31bf3856ad364e35_6.1
.7601.21921_none_05d1784dcbddd094.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142491
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142488
INFO | MFT record file size --- 2090
INFO | MFT record first cluster --- 6758708
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142492
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- POWERPNT.HXS
INFO | MFT record parent dir --- 130076
INFO | MFT record file size --- 6752594
INFO | MFT record first cluster --- 9937586
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: POWERPNT.HXS
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142493
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_d661828b53c3ec1724d154a8377d773f_31bf3856ad3
64e35_6.1.7601.17777_none_b1f41f13e0089bbb.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 5789188
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_d661828b53c3ec1724d154a8377d773f_31bf3856ad364e35_6.1
.7601.17777_none_b1f41f13e0089bbb.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142494
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- cdd1dcc4dc30007dbd725aa1e830be7429afec991d6d0af77a
f912afaec760ec.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 10616
INFO | MFT record first cluster --- 1064066
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: cdd1dcc4dc30007dbd725aa1e830be7429afec991d6d0af77af912afaec
760ec.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142495
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_321d293433f5b56688fb83e8101a18bd_31bf3856ad3
64e35_6.1.7601.21921_none_68cb8a69b98bb4cd.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 715
INFO | MFT record first cluster --- 5790604
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_321d293433f5b56688fb83e8101a18bd_31bf3856ad364e35_6.1
.7601.21921_none_68cb8a69b98bb4cd.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142496
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c23fc.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 686080
INFO | MFT record first cluster --- 7531121
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c23fc.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142497
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Procura_exit_badi.doc
INFO | MFT record parent dir --- 124730
INFO | MFT record file size --- 219648
INFO | MFT record first cluster --- 7041354
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Procura_exit_badi.doc
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142498
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_d750af44a219ef1ac43dbefec9f35cc4_31bf3856ad3
64e35_6.1.7601.17777_none_b5baba7bea968978.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 715
INFO | MFT record first cluster --- 5794939
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_d750af44a219ef1ac43dbefec9f35cc4_31bf3856ad364e35_6.1
.7601.17777_none_b5baba7bea968978.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142499
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_50975fede0fc6362fb21c772eb1f58dc_31bf3856ad3
64e35_6.1.7601.21921_none_3242abb70c289983.manifest

INFO | MFT record parent dir --- 16200


INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6672926
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_50975fede0fc6362fb21c772eb1f58dc_31bf3856ad364e35_6.1
.7601.21921_none_3242abb70c289983.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142500
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_14f28fc8
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
4f28fc8
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142501
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142500
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6758724
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142502
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_2ccef84e9358fd72bceee74e97787c1d_31bf3856ad3
64e35_6.1.7601.17777_none_873125b45c8e44b3.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722

INFO | MFT record first cluster --- 6673597


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_2ccef84e9358fd72bceee74e97787c1d_31bf3856ad364e35_6.1
.7601.17777_none_873125b45c8e44b3.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142503
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 463fe0daf44d8b9fdedde4a4ed9030e65aaf54dfdb1900c2e8
05bd35a65d4638.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 15320
INFO | MFT record first cluster --- 1119660
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 463fe0daf44d8b9fdedde4a4ed9030e65aaf54dfdb1900c2e805bd35a65
d4638.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142504
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0cee9c65
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
cee9c65
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142505
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142504
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6758750

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142506
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_9151d4ca456d61453e8b922e725481fe_31bf3856ad3
64e35_6.1.7600.21149_none_ecb1f2121b7ebe1d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 717
INFO | MFT record first cluster --- 6676170
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_9151d4ca456d61453e8b922e725481fe_31bf3856ad364e35_6.1
.7600.21149_none_ecb1f2121b7ebe1d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142507
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_d2f0cb046ff5a86f439a9c6c4ecaa597_31bf3856ad3
64e35_6.1.7600.16962_none_36c18999b0e91743.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 717
INFO | MFT record first cluster --- 6676446
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_d2f0cb046ff5a86f439a9c6c4ecaa597_31bf3856ad364e35_6.1
.7600.16962_none_36c18999b0e91743.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142508
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_dc811490cb2f31ea0cb9fb7c3b76e68c_31bf3856ad3
64e35_6.1.7600.21149_none_d534b8119f1cd66d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6678029
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_dc811490cb2f31ea0cb9fb7c3b76e68c_31bf3856ad364e35_6.1


.7600.21149_none_d534b8119f1cd66d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142509
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_4c3cc65f2d2722a75efc9a1eb08ea22c_31bf3856ad3
64e35_6.1.7600.16962_none_a4222f3381f304ef.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6694481
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_4c3cc65f2d2722a75efc9a1eb08ea22c_31bf3856ad364e35_6.1
.7600.16962_none_a4222f3381f304ef.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142510
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_635e14aa976605da4ba65251a84246b7_31bf3856ad3
64e35_6.1.7600.21149_none_58e453c178910c62.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6696822
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_635e14aa976605da4ba65251a84246b7_31bf3856ad364e35_6.1
.7600.21149_none_58e453c178910c62.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142511
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 7396C420A8E1BC1DA97F1AF0D10BAD21
INFO | MFT record parent dir --- 34946
INFO | MFT record file size --- 554
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: 7396C420A8E1BC1DA97F1AF0D10BAD21


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142512
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_f87a4e604ed1fcb01790047479cf2232_31bf3856ad3
64e35_6.1.7600.16962_none_e016795b3feec7a7.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6698092
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_f87a4e604ed1fcb01790047479cf2232_31bf3856ad364e35_6.1
.7600.16962_none_e016795b3feec7a7.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142513
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_417ae0364c41af35c18cf2b70abf8bd8_31bf3856ad3
64e35_6.1.7600.21149_none_189d6423c865a073.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 6698480
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_417ae0364c41af35c18cf2b70abf8bd8_31bf3856ad364e35_6.1
.7600.21149_none_189d6423c865a073.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142514
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_2b35b3a8fc958e266dd6efc58b6b8749_31bf3856ad3
64e35_6.1.7600.16962_none_86bb19da7f59b2dc.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 6700850
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_2b35b3a8fc958e266dd6efc58b6b8749_31bf3856ad364e35_6.1

.7600.16962_none_86bb19da7f59b2dc.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142515
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 2fdad4149b29c19c6a6befef047a8aac9ee1b8e3414635428f
fe84287c56ec7b.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 10595
INFO | MFT record first cluster --- 1064261
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 2fdad4149b29c19c6a6befef047a8aac9ee1b8e3414635428ffe84287c5
6ec7b.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142516
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 20791
INFO | MFT record file size --- 2090
INFO | MFT record first cluster --- 6758751
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142517
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c257a.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 308736
INFO | MFT record first cluster --- 6738276
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c257a.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142518
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ServiceModel.mof
INFO | MFT record parent dir --- 9570
INFO | MFT record file size --- 85113
INFO | MFT record first cluster --- 8032433
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ServiceModel.mof
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142519
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_f546b1bc2c852cfdf47631068d04e0e5_31bf3856ad3
64e35_6.1.7600.21149_none_28a95e702246cd02.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 715
INFO | MFT record first cluster --- 6730743
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_f546b1bc2c852cfdf47631068d04e0e5_31bf3856ad364e35_6.1
.7600.21149_none_28a95e702246cd02.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142520
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_0ca2c5885da9813b4f945119152873f2_31bf3856ad3
64e35_6.1.7600.16962_none_d4af6ba7fcacff49.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 715
INFO | MFT record first cluster --- 6747796
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_0ca2c5885da9813b4f945119152873f2_31bf3856ad364e35_6.1
.7600.16962_none_d4af6ba7fcacff49.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142521
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_85d0df1e9e1c0f4daafd9215dc89fcf3_31bf3856ad3
64e35_6.1.7600.21149_none_727d6188bbdd62de.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6752091
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_85d0df1e9e1c0f4daafd9215dc89fcf3_31bf3856ad364e35_6.1
.7600.21149_none_727d6188bbdd62de.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142522
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- c54fae32c02da4e3bc186afebbec344d_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 5210283
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: c54fae32c02da4e3bc186afebbec344d_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142523
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- sprite_global_v6[1].png
INFO | MFT record parent dir --- 127231
INFO | MFT record file size --- 11039
INFO | MFT record first cluster --- 2324760
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: sprite_global_v6[1].png
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142524

INFO | Mft read mode is FAST


INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_a092015fd91ff9ca0bca872c2e3fb161_31bf3856ad3
64e35_6.1.7600.16962_none_d5706d332f818da2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 722
INFO | MFT record first cluster --- 6784789
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_a092015fd91ff9ca0bca872c2e3fb161_31bf3856ad364e35_6.1
.7600.16962_none_d5706d332f818da2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142525
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- PortalConnectCore.dll
INFO | MFT record parent dir --- 122391
INFO | MFT record file size --- 553344
INFO | MFT record first cluster --- 8775321
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: PortalConnectCore.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142526
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7601.21921_none_8ebd351dc2760a47
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7601.21921_none_8ebd351dc2760a47
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142527
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7601.17777_none_8e03888ca97b9115
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7601.17777_none_8e03888ca97b9115
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142528
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142529
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262
efa0df1f_08af39bc
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262efa0df1f_
08af39bc
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142530
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262
efa0df1f_0faa80ba
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262efa0df1f_
0faa80ba
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

End of getting file parametres(size, time, date)


!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142531
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 142530
MFT record file size --- 1910
MFT record first cluster --- 1129380
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142532
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c243b.msp
MFT record parent dir --- 7875
MFT record file size --- 7070208
MFT record first cluster --- 8160526
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c243b.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142533
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- netfxsbs12.hkf
MFT record parent dir --- 7921
MFT record file size --- 41392
MFT record first cluster --- 5028088
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: netfxsbs12.hkf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142534
Mft read mode is FAST
Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c2452.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 2545664
INFO | MFT record first cluster --- 7992423
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c2452.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142535
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142529
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6758783
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142536
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0d3b4495
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
d3b4495
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142537
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142536

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record file size --- 1910


MFT record first cluster --- 6758797
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142538
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ONENOTEM.EXE
MFT record parent dir --- 130075
MFT record file size --- 97680
MFT record first cluster --- 8203466
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ONENOTEM.EXE
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142539
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 134593
MFT record file size --- 1910
MFT record first cluster --- 6758888
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142540
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- email-resolve[1]
MFT record parent dir --- 127272
MFT record file size --- 219
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: email-resolve[1]
Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142541
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ONFILTER.DLL
INFO | MFT record parent dir --- 130075
INFO | MFT record file size --- 71536
INFO | MFT record first cluster --- 4836673
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ONFILTER.DLL
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142542
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7600.21149_none_8cc910cbc558d710
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7600.21149_none_8cc910cbc558d710
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142543
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- drrey_prog_302[1].jpg
INFO | MFT record parent dir --- 127231
INFO | MFT record file size --- 13728
INFO | MFT record first cluster --- 2658932
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: drrey_prog_302[1].jpg
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142544
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 31a35ad01bf372db.dat
INFO | MFT record parent dir --- 108390
INFO | MFT record file size --- 10959
INFO | MFT record first cluster --- 6778115
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 31a35ad01bf372db.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142545
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_12db56be
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
2db56be
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142546
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142545
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6758889
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142547
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- b88616d39b7bb105697d1725632ce70c_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 5034293
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: b88616d39b7bb105697d1725632ce70c_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142548
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-p..ooler-core-localspl_31b
f3856ad364e35_6.1.7600.16962_none_8c22fa00ac518a85
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad36
4e35_6.1.7600.16962_none_8c22fa00ac518a85
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142549
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142550
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft.windows.winhttp_31bf3856ad364e35_5
.1.7601.17514_none_c519dbeb6e585715.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 48760
INFO | MFT record first cluster --- 2617056
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.1
7514_none_c519dbeb6e585715.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142551
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142552
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft.windows.winhttp_31bf3856ad364e35_5
.1.7601.17514_none_c519dbeb6e585715_winhttp.dll_6cd72d6e
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 351232
INFO | MFT record first cluster --- 3389877
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.1
7514_none_c519dbeb6e585715_winhttp.dll_6cd72d6e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142553
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142554
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.
3.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 21169
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142555
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
3.1.mum
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142556


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c2542.msp
MFT record parent dir --- 7875
MFT record file size --- 3795968
MFT record first cluster --- 8024407
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c2542.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142557
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 2779
MFT record first cluster --- 6804427
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142558
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
Passing the attribute assert
Attribute assert was successfully passed
--> read MFT record 142559
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- sapfewdll_01_0001_01_4528_1284.err.trc
MFT record parent dir --- 98888
MFT record file size --- 143
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: sapfewdll_01_0001_01_4528_1284.err.trc
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO | !!!---End the parsing loop---!!!


INFO | --> read MFT record 142560
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~
6.1.3.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7702
INFO | MFT record first cluster --- 3756750
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.3.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142561
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~
6.1.3.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7702
INFO | MFT record first cluster --- 21180
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.3.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142562
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c247e.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 4472832
INFO | MFT record first cluster --- 8094610
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c247e.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142563

INFO | Mft read mode is FAST


INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~
6.1.3.1.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 2409
INFO | MFT record first cluster --- 6805432
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.3.1.m
um
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142564
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.
1.3.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 15322
INFO | MFT record first cluster --- 1149087
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142565
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8188
MFT record file size --- 15322
MFT record first cluster --- 26273
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142566

INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Mft read mode is FAST


Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142567
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142568
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 10394
MFT record first cluster --- 1064504
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.mum

MFT record parent dir --- 8159


MFT record file size --- 10616
MFT record first cluster --- 1064941
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat

MFT record parent dir --- 8188


MFT record file size --- 10616
MFT record first cluster --- 35561
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142569

INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Mft read mode is FAST


Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8159
MFT record file size --- 6676
MFT record first cluster --- 3757084
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.mum

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142570
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- sapfewdll_01_0002_03_4292_3912.err.trc
INFO | MFT record parent dir --- 92114
INFO | MFT record file size --- 28101
INFO | MFT record first cluster --- 21501
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: sapfewdll_01_0002_03_4292_3912.err.trc
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142571
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~
6.1.3.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 1049928
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.3.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142572
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups

INFO | End of apply Sector Fixups


INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~
6.1.3.1.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 21211
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.3.1.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142573
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~
6.1.3.1.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 2431
INFO | MFT record first cluster --- 6815283
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.3.1.m
um
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142574
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.
1.3.1.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 15320
INFO | MFT record first cluster --- 1149091
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142575
Mft read mode is FAST
Try to apply Sector Fixups

INFO |
INFO |
INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

End of apply Sector Fixups


------MFT RECORD DUMP-----MFT record name --- Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142576
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c24e5.msp
MFT record parent dir --- 7875
MFT record file size --- 1764352
MFT record first cluster --- 7768517
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c24e5.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142577
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8188


MFT record file size --- 15320
MFT record first cluster --- 27080
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat

MFT record parent dir --- 8159


MFT record file size --- 10002
MFT record first cluster --- 1066794
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142578
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP------

INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

MFT record name --- Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.


MFT record parent dir --- 8159
MFT record file size --- 10595
MFT record first cluster --- 1078044
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142579
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 3d109b73b9260b0a.dat
INFO | MFT record parent dir --- 103984
INFO | MFT record file size --- 20213
INFO | MFT record first cluster --- 2035229
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 3d109b73b9260b0a.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142580
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 16c2503.msp
INFO | MFT record parent dir --- 7875
INFO | MFT record file size --- 1995264
INFO | MFT record first cluster --- 7864092
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 16c2503.msp
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142581
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_075cc49d
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0

INFO |
INFO |
INFO |
INFO |
75cc49d
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

MFT record first cluster --- 0


MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142582
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f69834174227023e.dat
MFT record parent dir --- 150534
MFT record file size --- 15466
MFT record first cluster --- 6583684
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f69834174227023e.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142583
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 142581
MFT record file size --- 1910
MFT record first cluster --- 6758911
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142584
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8188
MFT record file size --- 10595
MFT record first cluster --- 34664
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.cat

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.3.1.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142585
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8159
MFT record file size --- 6265
MFT record first cluster --- 6795242
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.3.1.mum

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142586
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 12.0.0.0__71e9bce111e9429c
INFO | MFT record parent dir --- 131998
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 12.0.0.0__71e9bce111e9429c
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142587
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_1084cb13
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
084cb13
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142588
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 30243541_3424464184.back.xml
INFO | MFT record parent dir --- 8160
INFO | MFT record file size --- 4623
INFO | MFT record first cluster --- 6795818
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 30243541_3424464184.back.xml
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142589
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_17e0b9b5
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
7e0b9b5
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142590
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142587
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6759446
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---End the parsing loop---!!!


--> read MFT record 142591
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Microsoft.Office.Interop.PowerPoint.dll
MFT record parent dir --- 142586
MFT record file size --- 350080
MFT record first cluster --- 6797517
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Microsoft.Office.Interop.PowerPoint.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142592
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Report.wer
MFT record parent dir --- 142589
MFT record file size --- 1910
MFT record first cluster --- 6759447
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Report.wer
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142593
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MSPPT.OLB
MFT record parent dir --- 130075
MFT record file size --- 369040
MFT record first cluster --- 7927048
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: MSPPT.OLB
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142594
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record name --- f_00110b


MFT record parent dir --- 88398
MFT record file size --- 24405
MFT record first cluster --- 1033590
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_00110b
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142595
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- POWERPNT.EXE
MFT record parent dir --- 130075
MFT record file size --- 521080
MFT record first cluster --- 8444378
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: POWERPNT.EXE
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142596
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001230
MFT record parent dir --- 88398
MFT record file size --- 28172
MFT record first cluster --- 9035038
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001230
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142597
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- PPCORE.DLL
MFT record parent dir --- 130075
MFT record file size --- 8494968
MFT record first cluster --- 10574082
MFT record is directory --- 0
------END OF MFT RECORD DUMP------

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

file name: PPCORE.DLL


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142598
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_00122b
MFT record parent dir --- 88398
MFT record file size --- 44437
MFT record first cluster --- 1109789
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_00122b
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142599
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_001114
MFT record parent dir --- 88398
MFT record file size --- 35121
MFT record first cluster --- 9187
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_001114
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142600
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- dataCache[4].swf
MFT record parent dir --- 3052
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: dataCache[4].swf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
1.0.cat
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---End the parsing loop---!!!


--> read MFT record 142601
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000fd4
MFT record parent dir --- 88398
MFT record file size --- 19886
MFT record first cluster --- 5304901
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fd4
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142602
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- iesqmdata0.sqm
MFT record parent dir --- 105940
MFT record file size --- 4624
MFT record first cluster --- 50074
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: iesqmdata0.sqm
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142603
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 7700
MFT record first cluster --- 6795820
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142604
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI69EBE19A85373BDB32FD12C0970D45BA


cp65001_3be0f812
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 503
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI69EBE19A85373BDB32FD12C0970D45BAcp65001_3
be0f812
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142605
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00110f
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 51001
INFO | MFT record first cluster --- 9558078
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00110f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142606
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 30243541_3852158647.xml
INFO | MFT record parent dir --- 8160
INFO | MFT record file size --- 2577
INFO | MFT record first cluster --- 8192810
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 30243541_3852158647.xml
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142607
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7600.17057_none_2cd3493e2bd3b616.manifest
INFO | MFT record parent dir --- 16200

INFO | MFT record file size --- 8306


INFO | MFT record first cluster --- 1078161
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7600.17057_none_2cd3493e2bd3b616.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142608
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- zsdu110080_pr.html
INFO | MFT record parent dir --- 142280
INFO | MFT record file size --- 82949
INFO | MFT record first cluster --- 8485847
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: zsdu110080_pr.html
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142609
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- NonCritical_7.5.7601.17514_9f56a313c6df69e5a3969b9
c22c31fc33ee469da_13bcdb9f
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: NonCritical_7.5.7601.17514_9f56a313c6df69e5a3969b9c22c31fc3
3ee469da_13bcdb9f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142610
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001110
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 63676
INFO | MFT record first cluster --- 9263617
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001110


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142611
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262
efa0df1f_1384bf50
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_9bdce52b6223a091a09f82dcd2225262efa0df1f_
1384bf50
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142612
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142611
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6759672
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142613
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_00117f
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 27042
INFO | MFT record first cluster --- 8255769
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_00117f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142614
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 16c252b.msp
MFT record parent dir --- 7875
MFT record file size --- 4250112
MFT record first cluster --- 7750980
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 16c252b.msp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142615
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- __AssemblyInfo__.ini
MFT record parent dir --- 142586
MFT record file size --- 224
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: __AssemblyInfo__.ini
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142616
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Battle.rfp
MFT record parent dir --- 137484
MFT record file size --- 7544
MFT record first cluster --- 3402828
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Battle.rfp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142617
Mft read mode is FAST

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Try to apply Sector Fixups


End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000fd3
MFT record parent dir --- 88398
MFT record file size --- 58326
MFT record first cluster --- 206682
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fd3
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142618
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000fc5
MFT record parent dir --- 88398
MFT record file size --- 33024
MFT record first cluster --- 9303662
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fc5
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142619
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009c5
MFT record parent dir --- 88398
MFT record file size --- 45345
MFT record first cluster --- 3756201
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009c5
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142620
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0008ad
MFT record parent dir --- 88398
MFT record file size --- 18300

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 1121862


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0008ad
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142621
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0008ae
MFT record parent dir --- 88398
MFT record file size --- 16895
MFT record first cluster --- 1123776
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0008ae
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142622
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {F4B5F860-B0F9-4071-8549-A11871317C16}
MFT record parent dir --- 332
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: {F4B5F860-B0F9-4071-8549-A11871317C16}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142623
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0008af
MFT record parent dir --- 88398
MFT record file size --- 20358
MFT record first cluster --- 1154240
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0008af
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142624
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- c7
INFO | MFT record parent dir --- 138939
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: c7
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142625
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Dot4.sys
INFO | MFT record parent dir --- 8230
INFO | MFT record file size --- 145920
INFO | MFT record first cluster --- 58815
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Dot4.sys
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142626
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- d9601240b305fe11e9c103708c602fb8_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 2035054
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: d9601240b305fe11e9c103708c602fb8_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142627


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 6dcd5c1cef6c2295ed82d5760f9f8db0_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 88507
INFO | MFT record file size --- 1508
INFO | MFT record first cluster --- 2035174
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 6dcd5c1cef6c2295ed82d5760f9f8db0_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142628
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0008b0
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 56021
INFO | MFT record first cluster --- 4080467
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0008b0
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142629
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0008b1
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 67951
INFO | MFT record first cluster --- 9415796
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0008b1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142630
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- f_000f9a


MFT record parent dir --- 88398
MFT record file size --- 40879
MFT record first cluster --- 359852
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000f9a
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142631
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- yahoo_logo_br[1].png
MFT record parent dir --- 127231
MFT record file size --- 2101
MFT record first cluster --- 2354280
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: yahoo_logo_br[1].png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142632
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000b7b
MFT record parent dir --- 88398
MFT record file size --- 39357
MFT record first cluster --- 3754605
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000b7b
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142633
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- index.dat
MFT record parent dir --- 46363
MFT record file size --- 32768
MFT record first cluster --- 3498816
MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: index.dat


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142634
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0008ba
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 18680
INFO | MFT record first cluster --- 1130300
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0008ba
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142635
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ~DFEE9E60921128377F.TMP
INFO | MFT record parent dir --- 333
INFO | MFT record file size --- 98304
INFO | MFT record first cluster --- 329627
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ~DFEE9E60921128377F.TMP
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142636
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- cda1dfee119688af742695edc4822894_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 5190279
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: cda1dfee119688af742695edc4822894_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142637
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.
6161_none_51cd0a7abbe4e19b.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 856
INFO | MFT record first cluster --- 839
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none
_51cd0a7abbe4e19b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142638
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ATL90.dll
INFO | MFT record parent dir --- 142640
INFO | MFT record file size --- 159048
INFO | MFT record first cluster --- 55299
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ATL90.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 142640 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l
INFO | Object was successfully constructed - l
INFO | file name: x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none
_51cd0a7abbe4e19b - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142639
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 0f28e813c3e5c32a58589ca77d4c8112cfb9c2bdbff9c90027


7610e563c05a26.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 7318
INFO | MFT record first cluster --- 3427874
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 0f28e813c3e5c32a58589ca77d4c8112cfb9c2bdbff9c900277610e563c
05a26.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142641
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {C7FC8B0F-AF9C-4F7E-A0ED-678E4F8B9500}
INFO | MFT record parent dir --- 332
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {C7FC8B0F-AF9C-4F7E-A0ED-678E4F8B9500}
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142642
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000f92
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 36647
INFO | MFT record first cluster --- 4429420
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000f92
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142643
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000fd5
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 23328

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 10115450


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000fd5
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142644
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- T0GZ+4LXzxvTjKu1cVEe3jDwxik=
MFT record parent dir --- 91431
MFT record file size --- 24998
MFT record first cluster --- 8190960
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: T0GZ+4LXzxvTjKu1cVEe3jDwxik=
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142645
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009cb
MFT record parent dir --- 88398
MFT record file size --- 48282
MFT record first cluster --- 4098131
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009cb
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142646
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ~WRS{6A8203D2-963B-46C4-95EB-49720EF9A810}.tmp
MFT record parent dir --- 73723
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ~WRS{6A8203D2-963B-46C4-95EB-49720EF9A810}.tmp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Start of getting file parametres(size, time, date)


End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142647
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009c8
MFT record parent dir --- 88398
MFT record file size --- 49806
MFT record first cluster --- 8122196
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009c8
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142648
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009c9
MFT record parent dir --- 88398
MFT record file size --- 21202
MFT record first cluster --- 8108649
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009c9
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142649
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009ca
MFT record parent dir --- 88398
MFT record file size --- 17865
MFT record first cluster --- 1118952
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009ca
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142650
Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000bb7
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 16491
INFO | MFT record first cluster --- 7517553
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000bb7
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142651
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0009d3
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 19229
INFO | MFT record first cluster --- 8259439
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0009d3
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142652
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI2065B5740FFE52A490D8AE37B99691C1
cp65001_54d263b4
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 1369
INFO | MFT record first cluster --- 166157
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI2065B5740FFE52A490D8AE37B99691C1cp65001_5
4d263b4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142653
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_0009ce

INFO | MFT record parent dir --- 88398


INFO | MFT record file size --- 26077
INFO | MFT record first cluster --- 6558209
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_0009ce
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142654
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142655
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0a3cb36e
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
a3cb36e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142656
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142655
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6759673
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142657
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed


a1fe2e1_10dcb38d
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
0dcb38d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142658
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142657
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6759692
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142659
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_1314b3ac
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
314b3ac
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142660
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer

INFO | MFT record parent dir --- 142659


INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6760526
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142661
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_0ff0b3ac
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
ff0b3ac
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142662
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_06c0b3ac
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_0
6c0b3ac
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142663
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142661
INFO | MFT record file size --- 1910

INFO | MFT record first cluster --- 6760527


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142664
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142662
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6760836
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142665
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763ed
a1fe2e1_14acb3cb
INFO | MFT record parent dir --- 3470
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Critical_6.1.7601_703c5bb8cf28b84c693be1437d8763eda1fe2e1_1
4acb3cb
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142666
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Report.wer
INFO | MFT record parent dir --- 142665
INFO | MFT record file size --- 1910
INFO | MFT record first cluster --- 6760837
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Report.wer

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142667
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI52A5D2D296E50CECE83A415AA4825D0B
cp65001_1c6aaa15
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 897
INFO | MFT record first cluster --- 24469
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI52A5D2D296E50CECE83A415AA4825D0Bcp65001_1
c6aaa15
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142668
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000aeb
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 90968
INFO | MFT record first cluster --- 8290524
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000aeb
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142669
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_001091
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 48331
INFO | MFT record first cluster --- 9847455
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_001091
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142670
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009e7
MFT record parent dir --- 88398
MFT record file size --- 21640
MFT record first cluster --- 8844613
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009e7
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142671
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d4
MFT record parent dir --- 88398
MFT record file size --- 17132
MFT record first cluster --- 8264619
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009d4
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142672
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d5
MFT record parent dir --- 88398
MFT record file size --- 23312
MFT record first cluster --- 8250032
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009d5
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142673
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- 1644a0653e0801c4.dat


MFT record parent dir --- 139619
MFT record file size --- 5694
MFT record first cluster --- 4253276
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1644a0653e0801c4.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142674
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d6
MFT record parent dir --- 88398
MFT record file size --- 17286
MFT record first cluster --- 8264735
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009d6
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142675
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d7
MFT record parent dir --- 88398
MFT record file size --- 18640
MFT record first cluster --- 8265877
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009d7
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142676
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d8
MFT record parent dir --- 88398
MFT record file size --- 20796
MFT record first cluster --- 8410682
MFT record is directory --- 0

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------END OF MFT RECORD DUMP-----file name: f_0009d8


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142677
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- HPSLPSVC0069.log
MFT record parent dir --- 9598
MFT record file size --- 7602
MFT record first cluster --- 615920
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: HPSLPSVC0069.log
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142678
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- HPSLPSVC0044.log
MFT record parent dir --- 9598
MFT record file size --- 5549
MFT record first cluster --- 3512823
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: HPSLPSVC0044.log
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142679
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009d9
MFT record parent dir --- 88398
MFT record file size --- 18504
MFT record first cluster --- 8268337
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009d9
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142680
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_0009da
MFT record parent dir --- 88398
MFT record file size --- 19574
MFT record first cluster --- 8268434
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_0009da
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142681
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- d8d41b7100b23d00.dat
MFT record parent dir --- 112224
MFT record file size --- 13460
MFT record first cluster --- 3498504
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: d8d41b7100b23d00.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142682
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- otl6B98.tmp
MFT record parent dir --- 333
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: otl6B98.tmp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142683
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- Terra.rfp


MFT record parent dir --- 137484
MFT record file size --- 7147
MFT record first cluster --- 6796591
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Terra.rfp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142684
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000c84
MFT record parent dir --- 88398
MFT record file size --- 26573
MFT record first cluster --- 5270275
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000c84
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142685
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- bnr_melhorcreditoconst[2].swf
MFT record parent dir --- 3065
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: bnr_melhorcreditoconst[2].swf
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142686
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000f9c
MFT record parent dir --- 88398
MFT record file size --- 18895
MFT record first cluster --- 1024595
MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000f9c


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142687
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- e99dded0a7f406db.dat
INFO | MFT record parent dir --- 124297
INFO | MFT record file size --- 5079
INFO | MFT record first cluster --- 1135388
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: e99dded0a7f406db.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142688
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 072AFD7B6D586E4EE0FBEA45F8352BC881FCB2A1
INFO | MFT record parent dir --- 159065
INFO | MFT record file size --- 296
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 072AFD7B6D586E4EE0FBEA45F8352BC881FCB2A1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142689
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI1AF1687E5B88B4DEAFCED9BD7768039E
cp65001_2dd089db
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 538
INFO | MFT record first cluster --- 1045685
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI1AF1687E5B88B4DEAFCED9BD7768039Ecp65001_2
dd089db
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142690
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000fd6
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 26829
INFO | MFT record first cluster --- 1093795
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000fd6
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142691
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000fcb
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 40674
INFO | MFT record first cluster --- 151806
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000fcb
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142692
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f5e40cbf4378e0042fa08a3d5bd1fc8d_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 36
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f5e40cbf4378e0042fa08a3d5bd1fc8d_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142693


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 5ddec43675650ec3d521112d9ce8ca89_734658fb-6230-409
2-a1c6-2664583b697b
INFO | MFT record parent dir --- 3302
INFO | MFT record file size --- 1465
INFO | MFT record first cluster --- 1091401
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 5ddec43675650ec3d521112d9ce8ca89_734658fb-6230-4092-a1c6-26
64583b697b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142694
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- toldo.rtf
INFO | MFT record parent dir --- 312
INFO | MFT record file size --- 1743
INFO | MFT record first cluster --- 4529
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: toldo.rtf
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142695
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI58112F67C5C57AD57AC5DF0407A537DB
cp65001_65398d74
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 667
INFO | MFT record first cluster --- 24650
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI58112F67C5C57AD57AC5DF0407A537DBcp65001_6
5398d74
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142696
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000c77
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 50354
INFO | MFT record first cluster --- 5360324
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000c77
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142697
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- srclient.dll
INFO | MFT record parent dir --- 137389
INFO | MFT record file size --- 43008
INFO | MFT record first cluster --- 4133132
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: srclient.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142699
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- AppCrash_wlcomm.exe_79b6a2440fbfee2c84d60a7cc21872
170c9d531_0c5aee06
INFO | MFT record parent dir --- 21075
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: AppCrash_wlcomm.exe_79b6a2440fbfee2c84d60a7cc21872170c9d531
_0c5aee06
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142700
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- jsproxy.dll

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 150457


MFT record file size --- 85504
MFT record first cluster --- 4734366
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: jsproxy.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142701
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- srclient.dll
MFT record parent dir --- 137383
MFT record file size --- 43008
MFT record first cluster --- 4218695
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: srclient.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142702
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 8404b9828fc46a55.dat
MFT record parent dir --- 127584
MFT record file size --- 10601
MFT record first cluster --- 4807676
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 8404b9828fc46a55.dat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142703
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- TFR3648.tmp
MFT record parent dir --- 333
MFT record file size --- 72329
MFT record first cluster --- 4428823
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: TFR3648.tmp

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142704
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- srclient.dll
MFT record parent dir --- 137405
MFT record file size --- 43008
MFT record first cluster --- 5403162
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: srclient.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142705
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- f_000cc2
MFT record parent dir --- 88398
MFT record file size --- 139854
MFT record first cluster --- 5220749
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: f_000cc2
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142706
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- srclient.dll
MFT record parent dir --- 137399
MFT record file size --- 43008
MFT record first cluster --- 4227924
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: srclient.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142707


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- wininet.dll
MFT record parent dir --- 150488
MFT record file size --- 1392128
MFT record first cluster --- 559684
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: wininet.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142708
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- imp[5].js
MFT record parent dir --- 3119
MFT record file size --- 993
MFT record first cluster --- 6761069
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: imp[5].js
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142709
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Analise programa YIPS_137_01.txt
MFT record parent dir --- 134548
MFT record file size --- 5463
MFT record first cluster --- 3427881
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Analise programa YIPS_137_01.txt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142710
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- srclient.dll

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 137387


MFT record file size --- 50176
MFT record first cluster --- 4251976
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: srclient.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142711
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Anlise.txt
MFT record parent dir --- 134548
MFT record file size --- 1335
MFT record first cluster --- 2040296
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Anlise.txt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142712
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- wininet.dll
MFT record parent dir --- 150457
MFT record file size --- 1392128
MFT record first cluster --- 9457016
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: wininet.dll
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142713
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- srclient.dll
MFT record parent dir --- 137402
MFT record file size --- 50176
MFT record first cluster --- 4293500
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: srclient.dll

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142714
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wininet.dll
INFO | MFT record parent dir --- 150501
INFO | MFT record file size --- 1129472
INFO | MFT record first cluster --- 473360
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wininet.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142715
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- rstrui.exe
INFO | MFT record parent dir --- 137402
INFO | MFT record file size --- 296960
INFO | MFT record first cluster --- 4858696
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: rstrui.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142716
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-g..validatefntcache-03_31b
f3856ad364e35_6.1.7601.22045_none_a75e29e84a6157b6.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1972
INFO | MFT record first cluster --- 8073875
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad36
4e35_6.1.7601.22045_none_a75e29e84a6157b6.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142717
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- BAS4MZ2.dat
INFO | MFT record parent dir --- 137810
INFO | MFT record file size --- 748
INFO | MFT record first cluster --- 3669877
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: BAS4MZ2.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142718
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetIB977893047CE6B9F44D3603C4946B9C3
cp65001_6ff791e7
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 667
INFO | MFT record first cluster --- 25311
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetIB977893047CE6B9F44D3603C4946B9C3cp65001_6
ff791e7
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142719
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-g..validatefntcache-03_31b
f3856ad364e35_6.1.7601.17888_none_a6ac762931614073.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1972
INFO | MFT record first cluster --- 8083932
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad36
4e35_6.1.7601.17888_none_a6ac762931614073.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142721


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 55a762ab877d7722.dat
INFO | MFT record parent dir --- 142720
INFO | MFT record file size --- 43840
INFO | MFT record first cluster --- 6786878
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 55a762ab877d7722.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142722
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-g..validatefntcache-03_31b
f3856ad364e35_6.1.7600.21258_none_a56ffdd44d4053c0.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1972
INFO | MFT record first cluster --- 8087660
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad36
4e35_6.1.7600.21258_none_a56ffdd44d4053c0.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142723
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-g..validatefntcache-03_31b
f3856ad364e35_6.1.7600.17057_none_a4e55ed934239d78.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1972
INFO | MFT record first cluster --- 8087665
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad36
4e35_6.1.7600.17057_none_a4e55ed934239d78.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142724
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7601.22045_none_2f4c144d42117054.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 8306
INFO | MFT record first cluster --- 1080629
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7601.22045_none_2f4c144d42117054.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142725
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7601.17888_none_2e9a608e29115911.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 8306
INFO | MFT record first cluster --- 1080692
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7601.17888_none_2e9a608e29115911.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142726
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7600.21258_none_2d5de83944f06c5e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 8306
INFO | MFT record first cluster --- 1087140
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7600.21258_none_2d5de83944f06c5e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142727
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 944E5B697BC46FE14AB888AE8A1EBB99_7B391E40DA98B3451
BCA155536F3C4CD
INFO | MFT record parent dir --- 34865
INFO | MFT record file size --- 470
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 944E5B697BC46FE14AB888AE8A1EBB99_7B391E40DA98B3451BCA155536
F3C4CD
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142728
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1b033e48b208124823df09d0a41aa5699411fff7fb4e78ff86
bf661d5dc4cb9d.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 12922
INFO | MFT record first cluster --- 1120979
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1b033e48b208124823df09d0a41aa5699411fff7fb4e78ff86bf661d5dc
4cb9d.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142729
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI27CDAE3D4F7BDC871CD94F7B450EC74B
cp65001_3f45847b
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 606
INFO | MFT record first cluster --- 25435
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI27CDAE3D4F7BDC871CD94F7B450EC74Bcp65001_3
f45847b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142730
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Estimativa.docx
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 12305
INFO | MFT record first cluster --- 2022214
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Estimativa.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142731
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 7d420ab6a1d7ec59.dat
INFO | MFT record parent dir --- 121969
INFO | MFT record file size --- 7886
INFO | MFT record first cluster --- 3477504
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 7d420ab6a1d7ec59.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142732
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_a9fdfab326cab40b0929eeb50a98c855_31bf3856ad3
64e35_6.1.7600.21258_none_55cb0dbc97ff03c1.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 8095702
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_a9fdfab326cab40b0929eeb50a98c855_31bf3856ad364e35_6.1
.7600.21258_none_55cb0dbc97ff03c1.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142733
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- EE975E9C41DF70E8FEE60065DA9608DBD07B2DAC

INFO | MFT record parent dir --- 159065


INFO | MFT record file size --- 296
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: EE975E9C41DF70E8FEE60065DA9608DBD07B2DAC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142734
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ordens_transporte.xlsx
INFO | MFT record parent dir --- 138567
INFO | MFT record file size --- 11511
INFO | MFT record first cluster --- 2032043
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ordens_transporte.xlsx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142735
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- index.dat
INFO | MFT record parent dir --- 103962
INFO | MFT record file size --- 32768
INFO | MFT record first cluster --- 6748359
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: index.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142736
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_b9a2e5d4fb8da211612842834dc5f34a_31bf3856ad3
64e35_6.1.7600.17057_none_e34a7a543876b732.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 8095802
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: amd64_b9a2e5d4fb8da211612842834dc5f34a_31bf3856ad364e35_6.1


.7600.17057_none_e34a7a543876b732.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142737
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- e2ec682979dc317a2da0633e4bedd937bd50ee199068a76050
5f78cb74779557.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 9435
INFO | MFT record first cluster --- 1087174
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: e2ec682979dc317a2da0633e4bedd937bd50ee199068a760505f78cb747
79557.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142738
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI7E070308D789CF11676CDA70B263128C
cp65001_74733f00
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 2859
INFO | MFT record first cluster --- 68886
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI7E070308D789CF11676CDA70B263128Ccp65001_7
4733f00
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142739
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Objetos ABAP.docx
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 10150
INFO | MFT record first cluster --- 2041070
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Objetos ABAP.docx

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142740
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_be96d57e1712c10e640e129fae10c02c_31bf3856ad3
64e35_6.1.7600.21258_none_a0a821e5de18e762.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 716
INFO | MFT record first cluster --- 8097925
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_be96d57e1712c10e640e129fae10c02c_31bf3856ad364e35_6.1
.7600.21258_none_a0a821e5de18e762.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142741
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetIE3105431D0D0AF9B54388E08C4279430
cp65001_0778d6ac
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 668
INFO | MFT record first cluster --- 393799
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetIE3105431D0D0AF9B54388E08C4279430cp65001_0
778d6ac
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142742
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetI98357C9426C8937A31079F150815289D
cp65001_04cc0646
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 484
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetI98357C9426C8937A31079F150815289Dcp65001_0
4cc0646

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142743
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ~$ - Documentao - EFTD - Melhorias SAP x GEWEB - Cri
ao JOB Interface GE x SAP - JOB YPSP255.DOC
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 162
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ~$ - Documentao - EFTD - Melhorias SAP x GEWEB - Criao JOB Inte
rface GE x SAP - JOB YPSP255.DOC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142744
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- TS - Documentao - EFTD - Melhorias SAP x GEWEB - Atu
alizao Interface SAP x GEWEB.DOC
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 354816
INFO | MFT record first cluster --- 8388526
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: TS - Documentao - EFTD - Melhorias SAP x GEWEB - Atualizao Inte
rface SAP x GEWEB.DOC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142745
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- TS - Documentao - EFTD - Melhorias SAP x GEWEB - Atu
alizao OSPS - JOB YPSP137.DOC
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 334848
INFO | MFT record first cluster --- 7769734
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: TS - Documentao - EFTD - Melhorias SAP x GEWEB - Atualizao OSPS
- JOB YPSP137.DOC

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142746
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- TS - Documentao - EFTD - Melhorias SAP x GEWEB - Cri
ao JOB Interface GE x SAP - JOB YPSP255.DOC
INFO | MFT record parent dir --- 134548
INFO | MFT record file size --- 356864
INFO | MFT record first cluster --- 8118675
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: TS - Documentao - EFTD - Melhorias SAP x GEWEB - Criao JOB Inte
rface GE x SAP - JOB YPSP255.DOC
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142747
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Oramento Relatrio de Anlises de Materiais
INFO | MFT record parent dir --- 138638
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Oramento Relatrio de Anlises de Materiais
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142748
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Cenrio Atual.docx
INFO | MFT record parent dir --- 142747
INFO | MFT record file size --- 302070
INFO | MFT record first cluster --- 1729739
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Cenrio Atual.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142749
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Cenrio Proposto.docx
MFT record parent dir --- 142747
MFT record file size --- 11427
MFT record first cluster --- 2041073
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Cenrio Proposto.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142750
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Estimativa Publicao do Relatrio ZZQM0040.docx
MFT record parent dir --- 142747
MFT record file size --- 123818
MFT record first cluster --- 3363246
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Estimativa Publicao do Relatrio ZZQM0040.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142751
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Estimativa WebDynpro Java - Camargo Correa.docx
MFT record parent dir --- 142747
MFT record file size --- 123372
MFT record first cluster --- 4188921
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Estimativa WebDynpro Java - Camargo Correa.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142752
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------MFT RECORD DUMP-----MFT record name --- ~$Controle_ABAP_V2.xlsx


MFT record parent dir --- 112425
MFT record file size --- 165
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ~$Controle_ABAP_V2.xlsx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142753
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Modelo Mapa da Qualidade.xls
MFT record parent dir --- 142747
MFT record file size --- 717312
MFT record first cluster --- 8233148
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Modelo Mapa da Qualidade.xls
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142754
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Pr-estimativa.docx
MFT record parent dir --- 142747
MFT record file size --- 11407
MFT record first cluster --- 2041076
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Pr-estimativa.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142755
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Olds
MFT record parent dir --- 135430
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

------END OF MFT RECORD DUMP-----file name: Olds


Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142756
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Help CSC_v02.hnd
MFT record parent dir --- 135430
MFT record file size --- 12148736
MFT record first cluster --- 10693942
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Help CSC_v02.hnd
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142757
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Help CSC.hnd
MFT record parent dir --- 142755
MFT record file size --- 9375744
MFT record first cluster --- 9632584
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Help CSC.hnd
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142758
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ExemploArquivoRemessa.txt
MFT record parent dir --- 138552
MFT record file size --- 4263210
MFT record first cluster --- 8568682
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ExemploArquivoRemessa.txt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142759
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Backup
MFT record parent dir --- 138678
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: Backup
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142760
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ABAP
MFT record parent dir --- 138552
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: ABAP
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142761
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1. Estruturas SE11.docx
MFT record parent dir --- 142760
MFT record file size --- 11018
MFT record first cluster --- 2041917
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1. Estruturas SE11.docx
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142762
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Objetos de Dicionrio de Dados Criados.docx
INFO | MFT record parent dir --- 142760
INFO | MFT record file size --- 10235
INFO | MFT record first cluster --- 2049997
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Objetos de Dicionrio de Dados Criados.docx
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142763
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- YRMM_006_02_201202171713.txt
INFO | MFT record parent dir --- 142759
INFO | MFT record file size --- 42091
INFO | MFT record first cluster --- 2189180
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: YRMM_006_02_201202171713.txt
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142764
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_dae81493f6a681683ed893c05ace4e2e_31bf3856ad3
64e35_6.1.7600.17057_none_8b6e27ac16c86bcb.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 716
INFO | MFT record first cluster --- 8108758
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_dae81493f6a681683ed893c05ace4e2e_31bf3856ad364e35_6.1
.7600.17057_none_8b6e27ac16c86bcb.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142765
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- htmlhelp.exe
INFO | MFT record parent dir --- 142769
INFO | MFT record file size --- 3507384

INFO | MFT record first cluster --- 9856392


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: htmlhelp.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142766
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- {AE76B53C-F824-11E1-8259-B97129854B48}.dat
INFO | MFT record parent dir --- 20638
INFO | MFT record file size --- 3584
INFO | MFT record first cluster --- 8729365
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: {AE76B53C-F824-11E1-8259-B97129854B48}.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142767
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Local State
INFO | MFT record parent dir --- 31979
INFO | MFT record file size --- 6210
INFO | MFT record first cluster --- 529856
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Local State
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142768
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 494fe6ab1d9cda6121d9c6b22c6bb899f52c02099cfc03c4ae
64595077dc331a.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 12920
INFO | MFT record first cluster --- 1122576
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 494fe6ab1d9cda6121d9c6b22c6bb899f52c02099cfc03c4ae64595077d
c331a.cat

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142770
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- helpndoc-setup.exe
INFO | MFT record parent dir --- 142769
INFO | MFT record file size --- 18253320
INFO | MFT record first cluster --- 10263888
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: helpndoc-setup.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142771
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- DataP_sapvaluesetIE21FA3037B352A05EC8F31FC61CACAEC
cp65001_3a25b929
INFO | MFT record parent dir --- 102577
INFO | MFT record file size --- 3061
INFO | MFT record first cluster --- 29675
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: DataP_sapvaluesetIE21FA3037B352A05EC8F31FC61CACAECcp65001_3
a25b929
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142772
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- sc2.bin
INFO | MFT record parent dir --- 119201
INFO | MFT record file size --- 9990
INFO | MFT record first cluster --- 1117677
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: sc2.bin
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142773
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_52d752a9dca81591dcd0802898f0c419_31bf3856ad3
64e35_6.1.7601.22045_none_450ba5c595a14f8d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 8121382
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_52d752a9dca81591dcd0802898f0c419_31bf3856ad364e35_6.1
.7601.22045_none_450ba5c595a14f8d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142774
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_561c7dd1d3c94adbddfb43a73b2711be_31bf3856ad3
64e35_6.1.7601.17888_none_4ebef4b4f9316921.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 713
INFO | MFT record first cluster --- 8121712
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_561c7dd1d3c94adbddfb43a73b2711be_31bf3856ad364e35_6.1
.7601.17888_none_4ebef4b4f9316921.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142775
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 5f198d3dc90ff5c6f9cd4231a9291a9cd4acbb6098a6b35eb5
df2f0f5ad0a282.cat
INFO | MFT record parent dir --- 16196
INFO | MFT record file size --- 9456
INFO | MFT record first cluster --- 1093983
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 5f198d3dc90ff5c6f9cd4231a9291a9cd4acbb6098a6b35eb5df2f0f5ad
0a282.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142776
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Safe Browsing Bloom
INFO | MFT record parent dir --- 31979
INFO | MFT record file size --- 8064996
INFO | MFT record first cluster --- 2103603
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Safe Browsing Bloom
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142777
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_aeacabc9ec92a222ead364a20d488811_31bf3856ad3
64e35_6.1.7601.22045_none_31d7473ad5c4d60e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 716
INFO | MFT record first cluster --- 8121922
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_aeacabc9ec92a222ead364a20d488811_31bf3856ad364e35_6.1
.7601.22045_none_31d7473ad5c4d60e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142778
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_246a0ed5323982da8661087635f6326f_31bf3856ad3
64e35_6.1.7601.17888_none_92c1cf65d9736252.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 716
INFO | MFT record first cluster --- 8126114
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_246a0ed5323982da8661087635f6326f_31bf3856ad364e35_6.1
.7601.17888_none_92c1cf65d9736252.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142779


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 84-2B-2B-7A-45-7E.png
MFT record parent dir --- 20799
MFT record file size --- 4265
MFT record first cluster --- 255608
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 84-2B-2B-7A-45-7E.png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142780
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ANoxRHPmqXZSqnn6w4rkH63NG4l48mA8kugrDvHeP4A.png
MFT record parent dir --- 20799
MFT record file size --- 4265
MFT record first cluster --- 1117106
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ANoxRHPmqXZSqnn6w4rkH63NG4l48mA8kugrDvHeP4A.png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142781
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Components.ini
MFT record parent dir --- 119044
MFT record file size --- 105222
MFT record first cluster --- 9082748
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Components.ini
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142782
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- CVR9AE8.tmp.cvr

INFO | MFT record parent dir --- 333


INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: CVR9AE8.tmp.cvr
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142783
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335175208.gif
INFO | MFT record parent dir --- 113204
INFO | MFT record file size --- 5937
INFO | MFT record first cluster --- 1060922
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335175208.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142784
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- WmiApRpl.h
INFO | MFT record parent dir --- 9232
INFO | MFT record file size --- 3631
INFO | MFT record first cluster --- 1148175
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: WmiApRpl.h
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142785
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7600.21258_none_2d5de83944f06c5e
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP------

INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364


e35_6.1.7600.21258_none_2d5de83944f06c5e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142786
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 3381992.od
INFO | MFT record parent dir --- 333
INFO | MFT record file size --- 134
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 3381992.od
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142787
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7600.17057_none_2cd3493e2bd3b616
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7600.17057_none_2cd3493e2bd3b616
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142788
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf
3856ad364e35_6.1.7601.22045_none_2f4c144d42117054
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7601.22045_none_2f4c144d42117054

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142789
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335175221.gif
INFO | MFT record parent dir --- 113204
INFO | MFT record file size --- 5885
INFO | MFT record first cluster --- 1060943
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335175221.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142790
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- CED209487D21B905304C249DD63B49BA_FFD145DC0694FAE49
9E08F4D1AE3E92E
INFO | MFT record parent dir --- 34865
INFO | MFT record file size --- 404
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: CED209487D21B905304C249DD63B49BA_FFD145DC0694FAE499E08F4D1A
E3E92E
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142791
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- WmiApRpl.ini
INFO | MFT record parent dir --- 9232
INFO | MFT record file size --- 49768
INFO | MFT record first cluster --- 6533318
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: WmiApRpl.ini
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142792
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Safe Browsing Download
MFT record parent dir --- 31979
MFT record file size --- 3207776
MFT record first cluster --- 2103524
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Safe Browsing Download
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142793
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1335175235.gif
MFT record parent dir --- 113204
MFT record file size --- 5810
MFT record first cluster --- 1060945
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1335175235.gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142794
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1335266910.gif
MFT record parent dir --- 113204
MFT record file size --- 10858
MFT record first cluster --- 1076404
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1335266910.gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142795
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-segoeui_31bf


3856ad364e35_6.1.7601.17888_none_2e9a608e29115911
INFO | MFT record parent dir --- 9613
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-segoeui_31bf3856ad364
e35_6.1.7601.17888_none_2e9a608e29115911
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142796
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- HPSLPSVC0015.log
INFO | MFT record parent dir --- 9598
INFO | MFT record file size --- 7463
INFO | MFT record first cluster --- 6796593
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: HPSLPSVC0015.log
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142797
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Safe Browsing Csd Whitelist
INFO | MFT record parent dir --- 31979
INFO | MFT record file size --- 134408
INFO | MFT record first cluster --- 8686287
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Safe Browsing Csd Whitelist
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142798
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Safe Browsing Download Whitelist
INFO | MFT record parent dir --- 31979
INFO | MFT record file size --- 19960

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
1.0.cat
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record first cluster --- 8687147


MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Safe Browsing Download Whitelist
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142799
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ~DFB6616057D25CD433.TMP
MFT record parent dir --- 333
MFT record file size --- 16384
MFT record first cluster --- 11065633
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ~DFB6616057D25CD433.TMP
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142800
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- bradesco_logscpMIB.dll06_09_2012_10_13_45.bin
MFT record parent dir --- 138611
MFT record file size --- 1012
MFT record first cluster --- 8818968
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: bradesco_logscpMIB.dll06_09_2012_10_13_45.bin
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142801
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.

|
|
|
|
|
|
|

MFT record parent dir --- 8188


MFT record file size --- 7700
MFT record first cluster --- 21219
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
Constructing node entry for MFT entry

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Node entry for MFT entry was successfully constructed


Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142802
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Preferences
MFT record parent dir --- 39505
MFT record file size --- 129688
MFT record first cluster --- 10413852
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Preferences
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142803
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- www.google[1].xml
MFT record parent dir --- 108
MFT record file size --- 94
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: www.google[1].xml
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142804
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- search[1].htm
MFT record parent dir --- 3052
MFT record file size --- 182834
MFT record first cluster --- 1033057
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: search[1].htm
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142805

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
1.0.mum
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Mft read mode is FAST


Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Z8LFBZ8R.txt
MFT record parent dir --- 328
MFT record file size --- 331
MFT record first cluster --- 0
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Z8LFBZ8R.txt
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142806
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8159


MFT record file size --- 4072
MFT record first cluster --- 8139849
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142807
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- nav_logo114[1].png
MFT record parent dir --- 3065
MFT record file size --- 28765
MFT record first cluster --- 3654155
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: nav_logo114[1].png
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142808
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~

6.1.1.0.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7702
INFO | MFT record first cluster --- 6799556
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.1.0.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142809
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- j_e6a6aca6[1].png
INFO | MFT record parent dir --- 3119
INFO | MFT record file size --- 15130
INFO | MFT record first cluster --- 7769939
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: j_e6a6aca6[1].png
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142810
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- rs=AItRSTPaBvP4g8hqk_5n2KnxHEqRe2jifg[1].js
INFO | MFT record parent dir --- 3065
INFO | MFT record file size --- 469065
INFO | MFT record first cluster --- 8564838
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: rs=AItRSTPaBvP4g8hqk_5n2KnxHEqRe2jifg[1].js
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142811
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335430812.gif
INFO | MFT record parent dir --- 113204
INFO | MFT record file size --- 8744
INFO | MFT record first cluster --- 1076407
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335430812.gif


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142812
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- favicon[4].ico
INFO | MFT record parent dir --- 3052
INFO | MFT record file size --- 5430
INFO | MFT record first cluster --- 3354
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: favicon[4].ico
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142813
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~
6.1.1.0.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7702
INFO | MFT record first cluster --- 21304
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.1.0.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142814
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- d042cc9543744d20[1].js
INFO | MFT record parent dir --- 3119
INFO | MFT record file size --- 60903
INFO | MFT record first cluster --- 8139697
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: d042cc9543744d20[1].js
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142815
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~
6.1.1.0.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 4623
INFO | MFT record first cluster --- 6799558
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.1.0.m
um
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142816
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- tia[1].png
INFO | MFT record parent dir --- 2613
INFO | MFT record file size --- 387
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: tia[1].png
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142817
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- VSC CALCADOS LTDA - 1013137 - 16.02.2012.xls
INFO | MFT record parent dir --- 149680
INFO | MFT record file size --- 22528
INFO | MFT record first cluster --- 3682104
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: VSC CALCADOS LTDA - 1013137 - 16.02.2012.xls
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
ERROR
ERROR
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142818


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- swxa[1].gif
MFT record parent dir --- 3052
MFT record file size --- 5223
MFT record first cluster --- 59986
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: swxa[1].gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142819
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- unp262176114.tmp
MFT record parent dir --- 120440
MFT record file size --- 17272
MFT record first cluster --- 3640859
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: unp262176114.tmp
Constructing node entry for MFT entry
Starting of putting deleted data for MFT entry
Deleted data for MFT entry was generated
Start of estimating damage level
EstimateDamageLevel - trying to extract run list
EstimateDamageLevel - run list was successfully extracted
Damage level was successfully estimated
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142820
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- {43C9F12D-478A-4B91-94D1-0DB95C86DD44}
MFT record parent dir --- 332
MFT record file size --- 0
MFT record first cluster --- 0
MFT record is directory --- 1
------END OF MFT RECORD DUMP-----file name: {43C9F12D-478A-4B91-94D1-0DB95C86DD44}
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
ERROR
ERROR
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

--> read MFT record 142821


Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8159
MFT record file size --- 12922
MFT record first cluster --- 1143232
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142822
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- sem_54e2402a5e33215e251a3491f27fcbad[1].js
MFT record parent dir --- 2613
MFT record file size --- 45302
MFT record first cluster --- 7951851
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: sem_54e2402a5e33215e251a3491f27fcbad[1].js
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142823
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- unp2397075.tmp
MFT record parent dir --- 120440
MFT record file size --- 45302
MFT record first cluster --- 7951896
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: unp2397075.tmp
Constructing node entry for MFT entry
Starting of putting deleted data for MFT entry
Deleted data for MFT entry was generated
Start of estimating damage level
EstimateDamageLevel - trying to extract run list
EstimateDamageLevel - run list was successfully extracted
Damage level was successfully estimated
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142824
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- dev_eusp4472
MFT record parent dir --- 98888
MFT record file size --- 3964
MFT record first cluster --- 4579779
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: dev_eusp4472
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142825
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142826
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|

MFT record parent dir --- 8188


MFT record file size --- 12922
MFT record first cluster --- 35610
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat

MFT record parent dir --- 8159


MFT record file size --- 2701
MFT record first cluster --- 1045961
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!

INFO | --> read MFT record 142827


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6
.1.1.0.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 9435
INFO | MFT record first cluster --- 1095717
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.ca
t
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142828
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-thumbnailcache_31bf3856ad364
e35_6.1.7601.17514_none_4121f04877693fef.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 7197
INFO | MFT record first cluster --- 4291227
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-thumbnailcache_31bf3856ad364e35_6.1.7
601.17514_none_4121f04877693fef.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142829
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- MSHist012012051420120515
INFO | MFT record parent dir --- 8207
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 1
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: MSHist012012051420120515
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142830
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- index.dat
INFO | MFT record parent dir --- 142829
INFO | MFT record file size --- 32768
INFO | MFT record first cluster --- 6781546
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: index.dat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142831
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6
.1.1.0.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 9435
INFO | MFT record first cluster --- 35580
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.ca
t
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142832
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6
.1.1.0.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 2935
INFO | MFT record first cluster --- 8144509
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_11_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.mu
m
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142833
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~


6.1.1.0.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 6800172
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.1.0.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142834
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~
6.1.1.0.cat
INFO | MFT record parent dir --- 8188
INFO | MFT record file size --- 7700
INFO | MFT record first cluster --- 21499
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.1.0.c
at
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142835
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-taskmgr_31bf3856ad364e35_6.1
.7601.17514_none_16699919077609d2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2358
INFO | MFT record first cluster --- 3386124
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-taskmgr_31bf3856ad364e35_6.1.7601.175
14_none_16699919077609d2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142836
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~


6.1.1.0.mum
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 3094
INFO | MFT record first cluster --- 8153379
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.1.0.m
um
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142837
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..sframework-inputdll_31bf3
856ad364e35_6.1.7601.17514_none_5e9e5c9f23978d8d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2618
INFO | MFT record first cluster --- 3385683
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..sframework-inputdll_31bf3856ad364e
35_6.1.7601.17514_none_5e9e5c9f23978d8d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142838
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ADSAdClient31[1].htm
INFO | MFT record parent dir --- 2613
INFO | MFT record file size --- 2150
INFO | MFT record first cluster --- 2611003
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ADSAdClient31[1].htm
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142839
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.

1.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.cat
INFO |
INFO |
INFO |

MFT record parent dir --- 8159


MFT record file size --- 12920
MFT record first cluster --- 1143946
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142840
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1335524721.gif
MFT record parent dir --- 113204
MFT record file size --- 7246
MFT record first cluster --- 1076614
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1335524721.gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142841
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- ad.xml
MFT record parent dir --- 113204
MFT record file size --- 3632
MFT record first cluster --- 5386309
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: ad.xml
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142842
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8188
MFT record file size --- 12920
MFT record first cluster --- 35019

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142843
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.
MFT record parent dir --- 8159
MFT record file size --- 3095
MFT record first cluster --- 8180147
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.mum

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142844
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- BAS4MZ3.BA0
INFO | MFT record parent dir --- 9140
INFO | MFT record file size --- 571
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: BAS4MZ3.BA0
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142845
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- r=m;age=28;seg=278;seg=364;seg=277;grp=2421393;grp
=2431794;grp=919967;grp=3179804;grp=36867;grp=1822697;grp=54673;grp=2257518;extr
a%3Dnull;s=0;ord=336540967[1].htm
INFO | MFT record parent dir --- 127275
INFO | MFT record file size --- 919
INFO | MFT record first cluster --- 4218289
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: r=m;age=28;seg=278;seg=364;seg=277;grp=2421393;grp=2431794;


grp=919967;grp=3179804;grp=36867;grp=1822697;grp=54673;grp=2257518;extra%3Dnull;
s=0;ord=336540967[1].htm
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142846
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.
1.1.0.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 9456
INFO | MFT record first cluster --- 1095989
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142847
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- rstrui.exe
MFT record parent dir --- 137387
MFT record file size --- 296960
MFT record first cluster --- 8437246
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: rstrui.exe
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142848
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- system.resources.dll
MFT record parent dir --- 121514
MFT record file size --- 10840
MFT record first cluster --- 1076616
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: system.resources.dll

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.cat
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142849
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.

INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |
1.1.0.mum
INFO |
INFO |
INFO |
INFO |
INFO |
INFO |

Constructing node entry for MFT entry


Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142850
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

MFT record parent dir --- 8188


MFT record file size --- 9456
MFT record first cluster --- 33411
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.cat

MFT record parent dir --- 8159


MFT record file size --- 3575
MFT record first cluster --- 8188191
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.1.0.mum
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142851
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1335251727.gif
MFT record parent dir --- 119972
MFT record file size --- 4665
MFT record first cluster --- 1027219
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1335251727.gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142852
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- mscorlib.ni.dll
INFO | MFT record parent dir --- 121320
INFO | MFT record file size --- 8947200
INFO | MFT record first cluster --- 5749729
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: mscorlib.ni.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142853
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335513440.gif
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 5329
INFO | MFT record first cluster --- 1076619
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335513440.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142854
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-rpc-http.resources_31bf3856a
d364e35_6.1.7601.17514_en-us_5524f6957e36bbf4.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1877
INFO | MFT record first cluster --- 2078075
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-rpc-http.resources_31bf3856ad364e35_6
.1.7601.17514_en-us_5524f6957e36bbf4.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142855


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 30243541_3852158647.back.xml
INFO | MFT record parent dir --- 8160
INFO | MFT record file size --- 1485
INFO | MFT record first cluster --- 8190011
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 30243541_3852158647.back.xml
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142856
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-tapiservice_31bf3856ad364e35
_6.1.7601.17514_none_e54442c74334b18a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 7669
INFO | MFT record first cluster --- 4290781
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-tapiservice_31bf3856ad364e35_6.1.7601
.17514_none_e54442c74334b18a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142857
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- f_000dff
INFO | MFT record parent dir --- 88398
INFO | MFT record file size --- 332355
INFO | MFT record first cluster --- 6573677
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: f_000dff
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142858
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335513452.gif


INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 5453
INFO | MFT record first cluster --- 1076638
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335513452.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142859
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_fr-fr_f9b4b24bb8f4fadc.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 2078107
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_fr-fr_f9b4b24bb8f4fadc.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142860
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- HPWUCl002.log
INFO | MFT record parent dir --- 333
INFO | MFT record file size --- 2202
INFO | MFT record first cluster --- 946575
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: HPWUCl002.log
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142861
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- srcore.dll
INFO | MFT record parent dir --- 144154
INFO | MFT record file size --- 503808

INFO | MFT record first cluster --- 9981636


INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: srcore.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | read MFT record 144154 - l
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Constructing the object - l
INFO | Object was successfully constructed - l
INFO | file name: amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7600.17018_none_a3235566ccb4af6a - l
INFO | Constructing node entry for MFT entry - l
INFO | Node entry for MFT entry was successfully constructed - l
INFO | Start of getting file parametres(size, time, date) - l
INFO | End of getting file parametres(size, time, date) - l
INFO | Getting parent dir entry num - l
INFO | End of getting parent dir for entry num - l
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142862
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wininet.dll
INFO | MFT record parent dir --- 150462
INFO | MFT record file size --- 1129472
INFO | MFT record first cluster --- 9057740
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wininet.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142863
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 944E5B697BC46FE14AB888AE8A1EBB99_7B391E40DA98B3451
BCA155536F3C4CD
INFO | MFT record parent dir --- 34946
INFO | MFT record file size --- 1499
INFO | MFT record first cluster --- 21620
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 944E5B697BC46FE14AB888AE8A1EBB99_7B391E40DA98B3451BCA155536
F3C4CD
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

!!!---Entering the parsing loop---!!!


!!!---End the parsing loop---!!!
--> read MFT record 142864
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- MAR8DDD.tmp
MFT record parent dir --- 333
MFT record file size --- 1313
MFT record first cluster --- 2661376
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: MAR8DDD.tmp
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142865
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- fsquirt.exe
MFT record parent dir --- 147338
MFT record file size --- 229376
MFT record first cluster --- 3316004
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: fsquirt.exe
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142866
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups
------MFT RECORD DUMP-----MFT record name --- 1335513466.gif
MFT record parent dir --- 119261
MFT record file size --- 5480
MFT record first cluster --- 1076946
MFT record is directory --- 0
------END OF MFT RECORD DUMP-----file name: 1335513466.gif
Constructing node entry for MFT entry
Node entry for MFT entry was successfully constructed
Start of getting file parametres(size, time, date)
End of getting file parametres(size, time, date)
!!!---Entering the parsing loop---!!!
!!!---End the parsing loop---!!!
--> read MFT record 142867
Mft read mode is FAST
Try to apply Sector Fixups
End of apply Sector Fixups

INFO | Passing the attribute assert


INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142868
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-webservices_31bf3856ad364e35
_6.1.7601.17514_none_1083c2248cf458dd.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2724
INFO | MFT record first cluster --- 5366984
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-webservices_31bf3856ad364e35_6.1.7601
.17514_none_1083c2248cf458dd.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142869
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-webservices_31bf3856ad364e35
_6.1.7601.17514_none_1083c2248cf458dd_webservices.dll_58f50a80
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 782336
INFO | MFT record first cluster --- 7982800
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-webservices_31bf3856ad364e35_6.1.7601
.17514_none_1083c2248cf458dd_webservices.dll_58f50a80
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142870
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_ro-ro_33b6644f20ba3abe.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 6761078
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_ro-ro_33b6644f20ba3abe.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142871
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142872
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-o..inefiles-win32-apis_31bf3
856ad364e35_6.1.7601.17514_none_ad7263bc576752fb.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 3017
INFO | MFT record first cluster --- 2085199
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e
35_6.1.7601.17514_none_ad7263bc576752fb.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142873
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_ro-ro_33b6644f20ba3abe_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 54272
INFO | MFT record first cluster --- 7959450
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_ro-ro_33b6644f20ba3abe_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142874
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142875
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-ldap-client_31bf3856ad364e

35_6.1.7601.17514_none_51624d066d0b3e1c.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 13962
INFO | MFT record first cluster --- 1744173
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-ldap-client_31bf3856ad364e35_6.1.76
01.17514_none_51624d066d0b3e1c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142876
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-ldap-client_31bf3856ad364e
35_6.1.7601.17514_none_51624d066d0b3e1c_wldap32.dll_09c99dc1
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 312832
INFO | MFT record first cluster --- 7686972
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-ldap-client_31bf3856ad364e35_6.1.76
01.17514_none_51624d066d0b3e1c_wldap32.dll_09c99dc1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142877
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-l..mepremium.resources_31bf3
856ad364e35_6.1.7601.17514_en-us_209b3b2d083840d2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2249
INFO | MFT record first cluster --- 2093503
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e
35_6.1.7601.17514_en-us_209b3b2d083840d2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142878
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-t..nalservices-runtime_31b

f3856ad364e35_6.1.7601.17514_none_3b05f4d3e2a0703c.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2962
INFO | MFT record first cluster --- 4282691
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-t..nalservices-runtime_31bf3856ad36
4e35_6.1.7601.17514_none_3b05f4d3e2a0703c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142879
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_he-il_3dd459ed9f63fbca.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 2103523
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_he-il_3dd459ed9f63fbca.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142880
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-t..nalservices-runtime_31b
f3856ad364e35_6.1.7601.17514_none_3b05f4d3e2a0703c_winsta.dll_4e6f9a4e
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 235008
INFO | MFT record first cluster --- 2654748
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-t..nalservices-runtime_31bf3856ad36
4e35_6.1.7601.17514_none_3b05f4d3e2a0703c_winsta.dll_4e6f9a4e
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142881
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1

.7601.17514_none_c4d0cdd7c56b493e.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2363
INFO | MFT record first cluster --- 1859563
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.175
14_none_c4d0cdd7c56b493e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142882
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142883
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1
.7601.17514_none_c4d0cdd7c56b493e_imm32.dll_53c2ab30
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 119808
INFO | MFT record first cluster --- 6546427
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.175
14_none_c4d0cdd7c56b493e_imm32.dll_53c2ab30
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142884
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-taskscheduler-netapi_31bf385
6ad364e35_6.1.7601.17514_none_0bc8278396499fd1.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2226
INFO | MFT record first cluster --- 2109715
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-taskscheduler-netapi_31bf3856ad364e35
_6.1.7601.17514_none_0bc8278396499fd1.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142885


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142886
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..tionmanager-license_31bf3
856ad364e35_6.1.7601.17514_none_fb0706882d64a29f.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2173
INFO | MFT record first cluster --- 2142320
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..tionmanager-license_31bf3856ad364e
35_6.1.7601.17514_none_fb0706882d64a29f.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142887
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-efs-core-library_31bf3856ad3
64e35_6.1.7601.17514_none_58a94d70f5cca7eb.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2689
INFO | MFT record first cluster --- 1851640
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-efs-core-library_31bf3856ad364e35_6.1
.7601.17514_none_58a94d70f5cca7eb.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142888
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-efs-core-library_31bf3856ad3
64e35_6.1.7601.17514_none_58a94d70f5cca7eb_efscore.dll_2a98ded7
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 205312
INFO | MFT record first cluster --- 2654806
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-efs-core-library_31bf3856ad364e35_6.1
.7601.17514_none_58a94d70f5cca7eb_efscore.dll_2a98ded7

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142889
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-i..er-engine.resources_31bf3
856ad364e35_6.1.7601.17514_it-it_d5d42323872d6f8c.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3024
INFO | MFT record first cluster --- 4307053
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e
35_6.1.7601.17514_it-it_d5d42323872d6f8c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142890
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-i..er-engine.resources_31bf3
856ad364e35_6.1.7601.17514_it-it_d5d42323872d6f8c_msimsg.dll.mui_72e8994f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 94720
INFO | MFT record first cluster --- 4188886
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e
35_6.1.7601.17514_it-it_d5d42323872d6f8c_msimsg.dll.mui_72e8994f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142891
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-shacct_31bf3856ad364e35_6.
1.7601.17514_none_242839193814d663.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 8990
INFO | MFT record first cluster --- 2085694
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-shacct_31bf3856ad364e35_6.1.7601.17
514_none_242839193814d663.manifest

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142892
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-shacct_31bf3856ad364e35_6.
1.7601.17514_none_242839193814d663_shacct.dll_f953c950
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 135168
INFO | MFT record first cluster --- 8121073
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-shacct_31bf3856ad364e35_6.1.7601.17
514_none_242839193814d663_shacct.dll_f953c950
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142893
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_sk-sk_d539b488144eefb8.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 4302046
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_sk-sk_d539b488144eefb8.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142894
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_sk-sk_d539b488144eefb8_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 53248
INFO | MFT record first cluster --- 4101417
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_sk-sk_d539b488144eefb8_comdlg32.dll.mui_ac8e62f4

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142895
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-themecpl_31bf3856ad364e35_6.
1.7601.17514_none_f8d4bf8064b6d32f.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 14205
INFO | MFT record first cluster --- 4824866
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-themecpl_31bf3856ad364e35_6.1.7601.17
514_none_f8d4bf8064b6d32f.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142896
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-cryptui-dll.resources_31bf38
56ad364e35_6.1.7601.17514_en-us_05699821fc9b6205.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2363
INFO | MFT record first cluster --- 5623596
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-cryptui-dll.resources_31bf3856ad364e3
5_6.1.7601.17514_en-us_05699821fc9b6205.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142897
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142898
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-cryptui-dll.resources_31bf38
56ad364e35_6.1.7601.17514_en-us_05699821fc9b6205_cryptui.dll.mui_9728c1dd
INFO | MFT record parent dir --- 16195

INFO | MFT record file size --- 139264


INFO | MFT record first cluster --- 7791844
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-cryptui-dll.resources_31bf3856ad364e3
5_6.1.7601.17514_en-us_05699821fc9b6205_cryptui.dll.mui_9728c1dd
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142899
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142900
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_es-es_ecc8f50ace56f38c.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 5622107
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_es-es_ecc8f50ace56f38c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142901
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-tcpip-utility_31bf3856ad364e
35_6.1.7601.17514_none_34ce5d95ad203bbe.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 7878
INFO | MFT record first cluster --- 4286032
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.76
01.17514_none_34ce5d95ad203bbe.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142902
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142903
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-taskscheduler-client_31bf385
6ad364e35_6.1.7601.17514_none_4601b1fffc91fa9b.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 22631
INFO | MFT record first cluster --- 6781566
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-taskscheduler-client_31bf3856ad364e35
_6.1.7601.17514_none_4601b1fffc91fa9b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142904
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | Passing the attribute assert
INFO | Attribute assert was successfully passed
INFO | --> read MFT record 142905
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-themeui_31bf3856ad364e35_6.1
.7601.17514_none_8706005e79c34246.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 38000
INFO | MFT record first cluster --- 4297267
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-themeui_31bf3856ad364e35_6.1.7601.175
14_none_8706005e79c34246.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142906
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_es-es_ecc8f50ace56f38c_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 54272
INFO | MFT record first cluster --- 3493210

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_es-es_ecc8f50ace56f38c_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142907
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_ko-kr_1b56589636443993.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3465
INFO | MFT record first cluster --- 5189648
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_ko-kr_1b56589636443993.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142908
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_ko-kr_1b56589636443993_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 44032
INFO | MFT record first cluster --- 2654857
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_ko-kr_1b56589636443993_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142909
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntlanui2.resources_31bf3856a
d364e35_6.1.7601.17514_en-us_450e69733eeed75d.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2147
INFO | MFT record first cluster --- 2164378

INFO | MFT record is directory --- 0


INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntlanui2.resources_31bf3856ad364e35_6
.1.7601.17514_en-us_450e69733eeed75d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142910
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-l..mepremium.resources_31bf3
856ad364e35_6.1.7601.17514_en-us_f7ef33e70a2e2b7e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2235
INFO | MFT record first cluster --- 2165379
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-l..mepremium.resources_31bf3856ad364e
35_6.1.7601.17514_en-us_f7ef33e70a2e2b7e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142911
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- Package_for_KB2732500~31bf3856ad364e35~amd64~~6.1.
1.0.cat
INFO | MFT record parent dir --- 8159
INFO | MFT record file size --- 7702
INFO | MFT record first cluster --- 1027473
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: Package_for_KB2732500~31bf3856ad364e35~amd64~~6.1.1.0.cat
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142912
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-ie-htmlediting_31bf3856ad3
64e35_9.4.8112.16448_none_c70d34294a7332dd.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 17008
INFO | MFT record first cluster --- 1148190
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-ie-htmlediting_31bf3856ad364e35_9.4


.8112.16448_none_c70d34294a7332dd.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142913
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-syssetup_31bf3856ad364e35_
6.1.7601.17514_none_cef6913cae56559b.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2248
INFO | MFT record first cluster --- 4962407
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.
17514_none_cef6913cae56559b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142914
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-syssetup_31bf3856ad364e35_
6.1.7601.17514_none_cef6913cae56559b_syssetup.dll_d4039292
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 17408
INFO | MFT record first cluster --- 7542395
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.
17514_none_cef6913cae56559b_syssetup.dll_d4039292
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142915
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_sl-si_306a71c3cd4673d1.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3465
INFO | MFT record first cluster --- 4944990
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35


_6.1.7601.17514_sl-si_306a71c3cd4673d1.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142916
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_sl-si_306a71c3cd4673d1_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 52224
INFO | MFT record first cluster --- 4099561
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_sl-si_306a71c3cd4673d1_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142917
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- graph.ico
INFO | MFT record parent dir --- 133978
INFO | MFT record file size --- 766
INFO | MFT record first cluster --- 1046870
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: graph.ico
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142918
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_da-dk_b1157433d5479276.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 2171785
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e

35_6.1.7601.17514_da-dk_b1157433d5479276.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142919
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-o..tend-apis.resources_31bf3
856ad364e35_6.1.7601.17514_en-us_a1eb9485bb71c8ff.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 3940
INFO | MFT record first cluster --- 6533598
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-o..tend-apis.resources_31bf3856ad364e
35_6.1.7601.17514_en-us_a1eb9485bb71c8ff.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142920
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-rpc-remote_31bf3856ad364e35_
6.1.7601.17514_none_c2a09d30916321d9.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 6486
INFO | MFT record first cluster --- 4282411
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-rpc-remote_31bf3856ad364e35_6.1.7601.
17514_none_c2a09d30916321d9.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142921
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 30243541_3909311916.xml
INFO | MFT record parent dir --- 8160
INFO | MFT record file size --- 1613
INFO | MFT record first cluster --- 8611157
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 30243541_3909311916.xml
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142922
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-systemrestore-main_31bf385
6ad364e35_6.1.7601.21988_none_af9c73da17920a97.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 12986
INFO | MFT record first cluster --- 1144516
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7601.21988_none_af9c73da17920a97.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142923
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.
1.7601.17514_none_32187fb040e2395a.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2852
INFO | MFT record first cluster --- 5035296
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.1.7601.17
514_none_32187fb040e2395a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142924
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.
1.7601.17514_none_32187fb040e2395a_ntlanman.dll_0a73d68d
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 69120
INFO | MFT record first cluster --- 4218735
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.1.7601.17
514_none_32187fb040e2395a_ntlanman.dll_0a73d68d
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142925
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_de-de_ae41096fd71de710.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 6568292
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_de-de_ae41096fd71de710.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142926
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-hardware-policy_31bf3856ad
364e35_6.1.7601.17514_none_604653a7c0745b40.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2952
INFO | MFT record first cluster --- 5133718
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-hardware-policy_31bf3856ad364e35_6.
1.7601.17514_none_604653a7c0745b40.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142927
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-hardware-policy_31bf3856ad
364e35_6.1.7601.17514_none_604653a7c0745b40_hwpolicy.sys_e58c38aa
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 14720
INFO | MFT record first cluster --- 4282344
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-hardware-policy_31bf3856ad364e35_6.
1.7601.17514_none_604653a7c0745b40_hwpolicy.sys_e58c38aa
INFO | Constructing node entry for MFT entry

INFO | Node entry for MFT entry was successfully constructed


INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142928
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-systemrestore-main_31bf385
6ad364e35_6.1.7601.17836_none_af46e616fe4dac6a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 12986
INFO | MFT record first cluster --- 1148847
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7601.17836_none_af46e616fe4dac6a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142929
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-taskscheduler-engine_31bf385
6ad364e35_6.1.7601.17514_none_e7b3b71a1d1c8662.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2472
INFO | MFT record first cluster --- 5249358
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-taskscheduler-engine_31bf3856ad364e35
_6.1.7601.17514_none_e7b3b71a1d1c8662.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142930
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335513476.gif
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 5422
INFO | MFT record first cluster --- 1077174
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335513476.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142931
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_nb-no_60149b9dfd3be56f.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3028
INFO | MFT record first cluster --- 5033166
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_nb-no_60149b9dfd3be56f.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142932
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_nb-no_60149b9dfd3be56f_msimsg.dll.mui_72e8994f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 80384
INFO | MFT record first cluster --- 1129634
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_nb-no_60149b9dfd3be56f_msimsg.dll.mui_72e8994f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142933
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_ar-sa_585df4a7092d7807.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 5033056
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_ar-sa_585df4a7092d7807.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142934
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_ar-sa_585df4a7092d7807_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 50688
INFO | MFT record first cluster --- 7596922
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_ar-sa_585df4a7092d7807_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142935
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..rvices-registryapis_31bf3
856ad364e35_6.1.7601.17514_none_a65991bd803dc65e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2429
INFO | MFT record first cluster --- 5094871
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..rvices-registryapis_31bf3856ad364e
35_6.1.7601.17514_none_a65991bd803dc65e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142936
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-explorerframe_31bf3856ad36
4e35_6.1.7601.17514_none_20a30ed28a70711b.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 46854
INFO | MFT record first cluster --- 1101916
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.1.
7601.17514_none_20a30ed28a70711b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142937
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-explorerframe_31bf3856ad36
4e35_6.1.7601.17514_none_20a30ed28a70711b_explorerframe.dll_f3ae0f78
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 1866240
INFO | MFT record first cluster --- 9078112
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.1.
7601.17514_none_20a30ed28a70711b_explorerframe.dll_f3ae0f78
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142938
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntfsrecover_31bf3856ad364e35
_6.1.7601.17514_none_ae5f892c4d9ff5f4.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1537
INFO | MFT record first cluster --- 5094670
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntfsrecover_31bf3856ad364e35_6.1.7601
.17514_none_ae5f892c4d9ff5f4.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142939
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 5017
INFO | MFT record first cluster --- 2108581
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142940
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcsvc.dll.mui_186571e1
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2560
INFO | MFT record first cluster --- 4253279
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcsvc.dll.mui_186571e1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142941
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcore6.dll.mui_27872349
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 17408
INFO | MFT record first cluster --- 2310891
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcore6.dll.mui_27872349
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142942
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..s-collaboration-api_31bf3
856ad364e35_6.1.7601.17514_none_47789a25fb881e44.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 37058
INFO | MFT record first cluster --- 6729599
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..s-collaboration-api_31bf3856ad364e
35_6.1.7601.17514_none_47789a25fb881e44.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)

INFO | End of getting file parametres(size, time, date)


INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142943
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcmonitor.dll.mui_478a710
3
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 4096
INFO | MFT record first cluster --- 6533233
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcmonitor.dll.mui_478a7103
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142944
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcore.dll.mui_8b901fc3
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 20992
INFO | MFT record first cluster --- 6831494
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcore.dll.mui_8b901fc3
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142945
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-d..lient-dll.resources_31b
f3856ad364e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcsvc6.dll.mui_b45c7567
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 17408
INFO | MFT record first cluster --- 7586283
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-d..lient-dll.resources_31bf3856ad36
4e35_6.1.7601.17514_en-us_b40d05c5d0aff0b4_dhcpcsvc6.dll.mui_b45c7567
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142946
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.
1.7601.17514_none_a20056db9d9602b9.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 8684
INFO | MFT record first cluster --- 1081628
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.1.7601.17
514_none_a20056db9d9602b9.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142947
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-htmlhelp-infotech_31bf3856
ad364e35_6.1.7601.17514_none_54c9f2832a59c760.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 40734
INFO | MFT record first cluster --- 2357182
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_
6.1.7601.17514_none_54c9f2832a59c760.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142948
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-htmlhelp-infotech_31bf3856
ad364e35_6.1.7601.17514_none_54c9f2832a59c760_itircl.dll_dafa7917
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 194048
INFO | MFT record first cluster --- 1096845
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_
6.1.7601.17514_none_54c9f2832a59c760_itircl.dll_dafa7917
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142949
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-htmlhelp-infotech_31bf3856
ad364e35_6.1.7601.17514_none_54c9f2832a59c760_itss.dll_f5d929eb
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 170496
INFO | MFT record first cluster --- 8004833
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_
6.1.7601.17514_none_54c9f2832a59c760_itss.dll_f5d929eb
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142950
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-rasbase-raspptp_31bf3856ad
364e35_6.1.7601.17514_none_f8152447fe76675d.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2901
INFO | MFT record first cluster --- 6595183
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-rasbase-raspptp_31bf3856ad364e35_6.
1.7601.17514_none_f8152447fe76675d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142951
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-rasbase-raspptp_31bf3856ad
364e35_6.1.7601.17514_none_f8152447fe76675d_raspptp.sys_25e89db1
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 111104
INFO | MFT record first cluster --- 4580027
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-rasbase-raspptp_31bf3856ad364e35_6.
1.7601.17514_none_f8152447fe76675d_raspptp.sys_25e89db1
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142952
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-nslookup_31bf3856ad364e35_6.
1.7601.17514_none_cd87dddbc4b4a790.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2409
INFO | MFT record first cluster --- 5074818
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17
514_none_cd87dddbc4b4a790.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142953
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-rasbase-rasl2tp_31bf3856ad
364e35_6.1.7601.17514_none_f802520bfe8dd487.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2901
INFO | MFT record first cluster --- 6593166
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-rasbase-rasl2tp_31bf3856ad364e35_6.
1.7601.17514_none_f802520bfe8dd487.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142954
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-rasbase-rasl2tp_31bf3856ad
364e35_6.1.7601.17514_none_f802520bfe8dd487_rasl2tp.sys_d69e0fa7
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 129536
INFO | MFT record first cluster --- 3606551
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-rasbase-rasl2tp_31bf3856ad364e35_6.
1.7601.17514_none_f802520bfe8dd487_rasl2tp.sys_d69e0fa7
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142955
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..rvices-rdp-direct3d_31bf3
856ad364e35_6.1.7601.17514_none_71ee5bc2f11cb563.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2811
INFO | MFT record first cluster --- 4961187
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..rvices-rdp-direct3d_31bf3856ad364e
35_6.1.7601.17514_none_71ee5bc2f11cb563.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142956
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_et-ee_50bd07dcca28c109.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2321
INFO | MFT record first cluster --- 4893435
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_et-ee_50bd07dcca28c109.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142957
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-kokila_31bf3
856ad364e35_6.1.7601.17514_none_4d4bb384a78cecc3.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 5397
INFO | MFT record first cluster --- 4290533
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-kokila_31bf3856ad364e
35_6.1.7601.17514_none_4d4bb384a78cecc3.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142958
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-kokila_31bf3
856ad364e35_6.1.7601.17514_none_4d4bb384a78cecc3_kokila.ttf_28595c29
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 201680
INFO | MFT record first cluster --- 8113399
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-kokila_31bf3856ad364e
35_6.1.7601.17514_none_4d4bb384a78cecc3_kokila.ttf_28595c29
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142959
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-kokila_31bf3
856ad364e35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilai.ttf_4e371084
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 241672
INFO | MFT record first cluster --- 7708441
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-kokila_31bf3856ad364e
35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilai.ttf_4e371084
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142960
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-kokila_31bf3
856ad364e35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilab.ttf_4e762005
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 202196
INFO | MFT record first cluster --- 8248361
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-kokila_31bf3856ad364e
35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilab.ttf_4e762005
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142961
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-kokila_31bf3
856ad364e35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilabi.ttf_822b42fe
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 235940
INFO | MFT record first cluster --- 8099119
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-kokila_31bf3856ad364e
35_6.1.7601.17514_none_4d4bb384a78cecc3_kokilabi.ttf_822b42fe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142962
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-virtualdiskservice_31bf385
6ad364e35_6.1.7601.17514_none_c910d80f114e267a.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 60482
INFO | MFT record first cluster --- 7592199
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35
_6.1.7601.17514_none_c910d80f114e267a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142963
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-virtualdiskservice_31bf385
6ad364e35_6.1.7601.17514_none_c910d80f114e267a_vdsldr.exe_20c491b3
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 22528
INFO | MFT record first cluster --- 6804834
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35
_6.1.7601.17514_none_c910d80f114e267a_vdsldr.exe_20c491b3
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142964
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-virtualdiskservice_31bf385
6ad364e35_6.1.7601.17514_none_c910d80f114e267a_vds.exe_cb461c29
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 533504
INFO | MFT record first cluster --- 8181691
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35
_6.1.7601.17514_none_c910d80f114e267a_vds.exe_cb461c29
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142965
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-virtualdiskservice_31bf385
6ad364e35_6.1.7601.17514_none_c910d80f114e267a_vdsutil.dll_f2ef43cf
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 185856
INFO | MFT record first cluster --- 4230403
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35
_6.1.7601.17514_none_c910d80f114e267a_vdsutil.dll_f2ef43cf
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142966
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-virtualdiskservice_31bf385
6ad364e35_6.1.7601.17514_none_c910d80f114e267a_vds_ps.dll_fed45dfd
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 116736
INFO | MFT record first cluster --- 8070658
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35
_6.1.7601.17514_none_c910d80f114e267a_vds_ps.dll_fed45dfd
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142967
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_cs-cz_05c5e84e9f9316bf.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3510
INFO | MFT record first cluster --- 4827458
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_cs-cz_05c5e84e9f9316bf.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142968
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_cs-cz_05c5e84e9f9316bf_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 52224
INFO | MFT record first cluster --- 3507139
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_cs-cz_05c5e84e9f9316bf_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142969
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- GrooveIcon.ico
INFO | MFT record parent dir --- 133978
INFO | MFT record file size --- 293950
INFO | MFT record first cluster --- 4902876
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: GrooveIcon.ico
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)

INFO | !!!---Entering the parsing loop---!!!


INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142970
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_en-us_5731df68c5fbf2d5.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 4811966
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_en-us_5731df68c5fbf2d5.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142971
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- oisicon.exe
INFO | MFT record parent dir --- 133978
INFO | MFT record file size --- 35088
INFO | MFT record first cluster --- 3498616
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: oisicon.exe
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142972
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_bg-bg_68d21d71f179ba4c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 4808934
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_bg-bg_68d21d71f179ba4c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142973


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-o..mation-asyncfilters_31bf3
856ad364e35_6.1.7601.17514_none_78d0d411176343a7.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2938
INFO | MFT record first cluster --- 4807432
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e
35_6.1.7601.17514_none_78d0d411176343a7.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142974
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-d..opwindowmanager-api_31bf3
856ad364e35_6.1.7601.17514_none_e2164e789e3f73ff.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2859
INFO | MFT record first cluster --- 6538582
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e
35_6.1.7601.17514_none_e2164e789e3f73ff.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142975
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntfsformat_31bf3856ad364e35_
6.1.7601.17514_none_7feaeb983a27774b.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 1489
INFO | MFT record first cluster --- 4804731
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntfsformat_31bf3856ad364e35_6.1.7601.
17514_none_7feaeb983a27774b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142976


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-d..opwindowmanager-api_31bf3
856ad364e35_6.1.7601.17514_none_e2164e789e3f73ff_dwmapi.dll_2f4f8b34
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 67072
INFO | MFT record first cluster --- 1041102
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e
35_6.1.7601.17514_none_e2164e789e3f73ff_dwmapi.dll_2f4f8b34
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142977
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-d..opwindowmanager-api_31bf3
856ad364e35_6.1.7601.17514_none_e2164e789e3f73ff_dwmcore.dll_523baf47
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 1371136
INFO | MFT record first cluster --- 8955520
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e
35_6.1.7601.17514_none_e2164e789e3f73ff_dwmcore.dll_523baf47
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142978
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf
3856ad364e35_6.1.7601.17514_none_61a1336c39d1f6dc.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3016
INFO | MFT record first cluster --- 6538794
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364
e35_6.1.7601.17514_none_61a1336c39d1f6dc.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142979


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf
3856ad364e35_6.1.7601.17514_none_61a1336c39d1f6dc_wbemcomn.dll_e2337e3c
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 529408
INFO | MFT record first cluster --- 2681994
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364
e35_6.1.7601.17514_none_61a1336c39d1f6dc_wbemcomn.dll_e2337e3c
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142980
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_pt-pt_a7c5fb6de18360b8.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3028
INFO | MFT record first cluster --- 1060806
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_pt-pt_a7c5fb6de18360b8.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142981
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_pt-pt_a7c5fb6de18360b8_msimsg.dll.mui_72e8994f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 87040
INFO | MFT record first cluster --- 7059343
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_pt-pt_a7c5fb6de18360b8_msimsg.dll.mui_72e8994f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142982


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..s-clientactivexcore_31bf3
856ad364e35_6.1.7601.17514_none_31f571a823ea4f88.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 131889
INFO | MFT record first cluster --- 7952433
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e
35_6.1.7601.17514_none_31f571a823ea4f88.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142983
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-sqmapi_31bf3856ad364e35_6.
1.7601.17514_none_5c63b87c1b6dc7ec.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 4546
INFO | MFT record first cluster --- 3758142
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-sqmapi_31bf3856ad364e35_6.1.7601.17
514_none_5c63b87c1b6dc7ec.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142984
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntfschkdsk_31bf3856ad364e35_
6.1.7601.17514_none_1b4862c63cde6202.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2189
INFO | MFT record first cluster --- 1122582
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntfschkdsk_31bf3856ad364e35_6.1.7601.
17514_none_1b4862c63cde6202.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142985


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-sqmapi_31bf3856ad364e35_6.
1.7601.17514_none_5c63b87c1b6dc7ec_sqmapi.dll_3755dd17
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 244736
INFO | MFT record first cluster --- 8057130
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-sqmapi_31bf3856ad364e35_6.1.7601.17
514_none_5c63b87c1b6dc7ec_sqmapi.dll_3755dd17
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142986
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..rvicesframework-all_31bf3
856ad364e35_6.1.7601.17514_none_60d559547ee403b2.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 5796
INFO | MFT record first cluster --- 4310134
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..rvicesframework-all_31bf3856ad364e
35_6.1.7601.17514_none_60d559547ee403b2.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142987
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_et-ee_e688c09ad25cd01b.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 1060924
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_et-ee_e688c09ad25cd01b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142988


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_et-ee_e688c09ad25cd01b_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 51712
INFO | MFT record first cluster --- 4728637
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_et-ee_e688c09ad25cd01b_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142989
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_da-dk_46e12cf1dd7ba188.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 6761079
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_da-dk_46e12cf1dd7ba188.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142990
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_da-dk_46e12cf1dd7ba188_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 52736
INFO | MFT record first cluster --- 2092048
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_da-dk_46e12cf1dd7ba188_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 142991


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_pl-pl_48647f8af4b7dcd8.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3465
INFO | MFT record first cluster --- 6761223
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_pl-pl_48647f8af4b7dcd8.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142992
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_pl-pl_48647f8af4b7dcd8_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 53760
INFO | MFT record first cluster --- 1988303
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_pl-pl_48647f8af4b7dcd8_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142993
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335513489.gif
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 5517
INFO | MFT record first cluster --- 1077283
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335513489.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142994
INFO | Mft read mode is FAST

INFO | Try to apply Sector Fixups


INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335513499.gif
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 5434
INFO | MFT record first cluster --- 1077336
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335513499.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142995
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 91297
INFO | MFT record first cluster --- 6550188
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142996
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpcore6.dll_38a935e4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 191488
INFO | MFT record first cluster --- 5201919
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpcore6.dll_38a935e4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142997
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36


4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpcsvc6.dll_39c77c46
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 43008
INFO | MFT record first cluster --- 6533468
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpcsvc6.dll_39c77c46
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142998
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpclientdll.ptxml_6a7470ef
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 5597
INFO | MFT record first cluster --- 3674699
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpclientdll.ptxml_6a7470ef
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 142999
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpcore.dll_8036fe08
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 254464
INFO | MFT record first cluster --- 7788574
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpcore.dll_8036fe08
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143000
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3


856ad364e35_6.1.7601.17514_es-es_56fd3c4cc622e47a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 1163442
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_es-es_56fd3c4cc622e47a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143001
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpcsvc.dll_8155446a
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 61952
INFO | MFT record first cluster --- 5059999
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpcsvc.dll_8155446a
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143002
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-dhcp-client-dll_31bf3856ad36
4e35_6.1.7601.17514_none_d961938b8cd1e885_dhcpcmonitor.dll_aa545cc8
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 11264
INFO | MFT record first cluster --- 2682168
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.1.
7601.17514_none_d961938b8cd1e885_dhcpcmonitor.dll_aa545cc8
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143003
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-systemrestore-main_31bf385


6ad364e35_6.1.7600.21208_none_ae0c6e561a2af265.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 12986
INFO | MFT record first cluster --- 1150020
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7600.21208_none_ae0c6e561a2af265.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143004
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335524713.gif
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 6056
INFO | MFT record first cluster --- 1081631
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335524713.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143005
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-systemrestore-main_31bf385
6ad364e35_6.1.7600.17018_none_ad77ffb901157165.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 12986
INFO | MFT record first cluster --- 1153341
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7600.17018_none_ad77ffb901157165.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143006
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-systemrestore-main_31bf385

6ad364e35_6.1.7601.21988_none_a547c987e331489c.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 15782
INFO | MFT record first cluster --- 1154567
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7601.21988_none_a547c987e331489c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143007
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ad.xml
INFO | MFT record parent dir --- 119261
INFO | MFT record file size --- 3632
INFO | MFT record first cluster --- 5318120
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ad.xml
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143008
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- jscript9.dll
INFO | MFT record parent dir --- 150553
INFO | MFT record file size --- 2312704
INFO | MFT record first cluster --- 60977216
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: jscript9.dll
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143009
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335251758.gif
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 4467
INFO | MFT record first cluster --- 6761420
INFO | MFT record is directory --- 0

INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335251758.gif


INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143010
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-systemrestore-main_31bf385
6ad364e35_6.1.7600.21208_none_a3b7c403e5ca306a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 15782
INFO | MFT record first cluster --- 1154642
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7600.21208_none_a3b7c403e5ca306a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143011
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.
1.7601.17514_none_32187fb040e2395a.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2852
INFO | MFT record first cluster --- 1660373
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-ntlanman_31bf3856ad364e35_6.1.7601.17
514_none_32187fb040e2395a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143012
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335252604.gif
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 4578
INFO | MFT record first cluster --- 6762341
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335252604.gif

INFO | Constructing node entry for MFT entry


INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143013
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335252665.gif
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 4437
INFO | MFT record first cluster --- 6762746
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335252665.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143014
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-ole-automation_31bf3856ad3
64e35_6.1.7601.17676_none_253bfd4146a956df.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 47158
INFO | MFT record first cluster --- 1121770
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-ole-automation_31bf3856ad364e35_6.1
.7601.17676_none_253bfd4146a956df.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143015
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_fi-fi_f61840f9bb3cd6a4.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 2021768
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_fi-fi_f61840f9bb3cd6a4.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143016
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-ole-automation_31bf3856ad3
64e35_6.1.7601.17676_none_253bfd4146a956df_oleaut32.dll_730e3d41
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 571904
INFO | MFT record first cluster --- 8426716
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-ole-automation_31bf3856ad364e35_6.1
.7601.17676_none_253bfd4146a956df_oleaut32.dll_730e3d41
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143017
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.
1.7601.17713_none_27ac3ff6bbfe0d01.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2515
INFO | MFT record first cluster --- 6545884
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.17
713_none_27ac3ff6bbfe0d01.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143018
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.
1.7601.17713_none_27ac3ff6bbfe0d01_csrsrv.dll_f50da7f9
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 43520
INFO | MFT record first cluster --- 2440964
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.17
713_none_27ac3ff6bbfe0d01_csrsrv.dll_f50da7f9
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143019
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-utsaah_31bf3
856ad364e35_6.1.7601.17514_none_8a6cbec4ba3b0202.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 5396
INFO | MFT record first cluster --- 4323752
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-utsaah_31bf3856ad364e
35_6.1.7601.17514_none_8a6cbec4ba3b0202.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143020
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-takeown_31bf3856ad364e35_6.1
.7601.17514_none_fbf2cfb573e03306.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2489
INFO | MFT record first cluster --- 2228817
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-takeown_31bf3856ad364e35_6.1.7601.175
14_none_fbf2cfb573e03306.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143021
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-utsaah_31bf3
856ad364e35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaah.ttf_0b44910a
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 216004
INFO | MFT record first cluster --- 8254007
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-utsaah_31bf3856ad364e
35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaah.ttf_0b44910a
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143022
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-utsaah_31bf3
856ad364e35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahi.ttf_0df5fad5
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 239152
INFO | MFT record first cluster --- 8293160
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-utsaah_31bf3856ad364e
35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahi.ttf_0df5fad5
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143023
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-utsaah_31bf3
856ad364e35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahb.ttf_0e350a56
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 210644
INFO | MFT record first cluster --- 7773655
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-utsaah_31bf3856ad364e
35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahb.ttf_0e350a56
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143024
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-utsaah_31bf3
856ad364e35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahbi.ttf_3e01b33f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 218956
INFO | MFT record first cluster --- 8244424
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-utsaah_31bf3856ad364e
35_6.1.7601.17514_none_8a6cbec4ba3b0202_utsaahbi.ttf_3e01b33f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143025
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-shonar_31bf3
856ad364e35_6.1.7601.17514_none_22bcf2b96e304317.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3514
INFO | MFT record first cluster --- 6530927
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-shonar_31bf3856ad364e
35_6.1.7601.17514_none_22bcf2b96e304317.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143026
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-shonar_31bf3
856ad364e35_6.1.7601.17514_none_22bcf2b96e304317_shonarb.ttf_127871e9
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 301028
INFO | MFT record first cluster --- 6748719
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-shonar_31bf3856ad364e
35_6.1.7601.17514_none_22bcf2b96e304317_shonarb.ttf_127871e9
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143027
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-shonar_31bf3
856ad364e35_6.1.7601.17514_none_22bcf2b96e304317_shonar.ttf_fdf1d355
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 340100
INFO | MFT record first cluster --- 8229084
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-shonar_31bf3856ad364e
35_6.1.7601.17514_none_22bcf2b96e304317_shonar.ttf_fdf1d355
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143028
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-w..-infrastructure-bsp_31b
f3856ad364e35_6.1.7601.17514_none_16795c7543eb48cf.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3132
INFO | MFT record first cluster --- 5468091
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad36
4e35_6.1.7601.17514_none_16795c7543eb48cf.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143029
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-w..-infrastructure-bsp_31b
f3856ad364e35_6.1.7601.17514_none_16795c7543eb48cf_mswsock.dll_e2ad0f2d
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 326144
INFO | MFT record first cluster --- 7987368
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad36
4e35_6.1.7601.17514_none_16795c7543eb48cf_mswsock.dll_e2ad0f2d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143030
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-credui.resources_31bf3856a
d364e35_6.1.7601.17514_en-us_c040cad9b8e1500c.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2374
INFO | MFT record first cluster --- 5611972
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-credui.resources_31bf3856ad364e35_6
.1.7601.17514_en-us_c040cad9b8e1500c.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143031
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-runonce_31bf3856ad364e35_6.1
.7601.17514_none_17c23e881d4a0b0b.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2358
INFO | MFT record first cluster --- 4813159
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-runonce_31bf3856ad364e35_6.1.7601.175
14_none_17c23e881d4a0b0b.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143032
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-credui.resources_31bf3856a
d364e35_6.1.7601.17514_en-us_c040cad9b8e1500c_credui.dll.mui_34721171
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 11264
INFO | MFT record first cluster --- 4236097
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-credui.resources_31bf3856ad364e35_6
.1.7601.17514_en-us_c040cad9b8e1500c_credui.dll.mui_34721171
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143033
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_lv-lv_63d057976f8cd4ea.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3461
INFO | MFT record first cluster --- 6560297
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_lv-lv_63d057976f8cd4ea.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143034
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..services-remotepage_31bf3
856ad364e35_6.1.7601.17514_none_06fdfb9f0bbb9f41.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 4681
INFO | MFT record first cluster --- 4310121
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..services-remotepage_31bf3856ad364e
35_6.1.7601.17514_none_06fdfb9f0bbb9f41.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143035
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-comdlg32.resources_31bf3856a
d364e35_6.1.7601.17514_lv-lv_63d057976f8cd4ea_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 53248
INFO | MFT record first cluster --- 4227087
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6
.1.7601.17514_lv-lv_63d057976f8cd4ea_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143036
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 23825
INFO | MFT record first cluster --- 7421818
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143037
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiapi.dll_0bf3f842
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 169472
INFO | MFT record first cluster --- 8060568
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728_puiapi.dll_0bf3f842
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143038
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 324608
INFO | MFT record first cluster --- 8149944
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728_puiobj.dll_343adf45
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143039
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_compstui.dll_a5f72f50
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 276480
INFO | MFT record first cluster --- 5653982
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728_compstui.dll_a5f72f50
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143040
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..tivexcore.resources_31bf3
856ad364e35_6.1.7601.17514_en-us_75c91afce4c06c91.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 5550
INFO | MFT record first cluster --- 4309875
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e
35_6.1.7601.17514_en-us_75c91afce4c06c91.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143041
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_printui.exe_bb673fff
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 60928
INFO | MFT record first cluster --- 6711331
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728_printui.exe_bb673fff
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143042
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_cs-cz_13db940cdf019677.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 4949611
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_cs-cz_13db940cdf019677.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143043
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-p..installerandprintui_31b
f3856ad364e35_6.1.7601.17514_none_3eceef6140ec9728_findnetprinters.dll_d9721533
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 58368
INFO | MFT record first cluster --- 6710203
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-p..installerandprintui_31bf3856ad36
4e35_6.1.7601.17514_none_3eceef6140ec9728_findnetprinters.dll_d9721533
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143044
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-s..cardsubsystemclient_31b
f3856ad364e35_6.1.7601.17514_none_770a7fb29038c2c0.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2937
INFO | MFT record first cluster --- 5251077
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-s..cardsubsystemclient_31bf3856ad36
4e35_6.1.7601.17514_none_770a7fb29038c2c0.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143045
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-s..cardsubsystemclient_31b
f3856ad364e35_6.1.7601.17514_none_770a7fb29038c2c0_winscard.dll_cfd3258d
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 217600
INFO | MFT record first cluster --- 8238202
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-s..cardsubsystemclient_31bf3856ad36
4e35_6.1.7601.17514_none_770a7fb29038c2c0_winscard.dll_cfd3258d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143046
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-activexproxy_31bf3856ad364
e35_6.1.7601.17514_none_703438df00e9e0d7.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 475995
INFO | MFT record first cluster --- 8697241
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7
601.17514_none_703438df00e9e0d7.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143047
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-activexproxy_31bf3856ad364
e35_6.1.7601.17514_none_703438df00e9e0d7_actxprxy.dll_82133921
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 958464
INFO | MFT record first cluster --- 9006381
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7
601.17514_none_703438df00e9e0d7_actxprxy.dll_82133921
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143048
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_ar-sa_c2923be900f968f5.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 5318989
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_ar-sa_c2923be900f968f5.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143049
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-t..services-publicapis_31bf3
856ad364e35_6.1.7601.17514_none_c938554924975526.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2622
INFO | MFT record first cluster --- 5110724
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-t..services-publicapis_31bf3856ad364e
35_6.1.7601.17514_none_c938554924975526.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143050
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_bg-bg_5abc71b3b20b3a94.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3465
INFO | MFT record first cluster --- 6555538
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_bg-bg_5abc71b3b20b3a94.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143051
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-comdlg32.resources_31bf385
6ad364e35_6.1.7601.17514_bg-bg_5abc71b3b20b3a94_comdlg32.dll.mui_ac8e62f4
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 53248
INFO | MFT record first cluster --- 2360473
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35
_6.1.7601.17514_bg-bg_5abc71b3b20b3a94_comdlg32.dll.mui_ac8e62f4
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143052
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-s..-binaries.resources_31bf3
856ad364e35_6.1.7601.17514_el-gr_56d73702c6334f9e.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2276
INFO | MFT record first cluster --- 5040600
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e
35_6.1.7601.17514_el-gr_56d73702c6334f9e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143053
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_ru-ru_ee690d31c664eee4.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3028
INFO | MFT record first cluster --- 3305835
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_ru-ru_ee690d31c664eee4.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143054
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-i..er-engine.resources_31b
f3856ad364e35_6.1.7601.17514_ru-ru_ee690d31c664eee4_msimsg.dll.mui_72e8994f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 82432
INFO | MFT record first cluster --- 4805312
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-i..er-engine.resources_31bf3856ad36
4e35_6.1.7601.17514_ru-ru_ee690d31c664eee4_msimsg.dll.mui_72e8994f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143055
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-spp-main_31bf3856ad364e35_
6.1.7601.17514_none_426cfc30c37c5a4e.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 32611
INFO | MFT record first cluster --- 3513606
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-spp-main_31bf3856ad364e35_6.1.7601.
17514_none_426cfc30c37c5a4e.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143056
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-spp-main_31bf3856ad364e35_
6.1.7601.17514_none_426cfc30c37c5a4e_sxproxy.dll_656c0445
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 75776
INFO | MFT record first cluster --- 4741549
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-spp-main_31bf3856ad364e35_6.1.7601.
17514_none_426cfc30c37c5a4e_sxproxy.dll_656c0445
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143057
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-spp-main_31bf3856ad364e35_
6.1.7601.17514_none_426cfc30c37c5a4e_spp.dll_d7bb2b05
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 244224
INFO | MFT record first cluster --- 8291216
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-spp-main_31bf3856ad364e35_6.1.7601.
17514_none_426cfc30c37c5a4e_spp.dll_d7bb2b05
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143058
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-fms_31bf3856ad364e35_
6.1.7601.17514_none_a5f8bb0ccaefbe07.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 18307
INFO | MFT record first cluster --- 3583035
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-fms_31bf3856ad364e35_6.1.7601.
17514_none_a5f8bb0ccaefbe07.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143059
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-fms_31bf3856ad364e35_
6.1.7601.17514_none_a5f8bb0ccaefbe07_fms_metadata.xml_ad942f19
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 72736
INFO | MFT record first cluster --- 5797968
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-fms_31bf3856ad364e35_6.1.7601.
17514_none_a5f8bb0ccaefbe07_fms_metadata.xml_ad942f19
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143060
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-fms_31bf3856ad364e35_
6.1.7601.17514_none_a5f8bb0ccaefbe07_fms.dll_fbbb04ce
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 116224
INFO | MFT record first cluster --- 7987466
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-fms_31bf3856ad364e35_6.1.7601.
17514_none_a5f8bb0ccaefbe07_fms.dll_fbbb04ce
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143061
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-com-base-qfe-rpcss_31bf385
6ad364e35_6.1.7601.17514_none_c7f0e16b547f887d.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 2005
INFO | MFT record first cluster --- 1132819
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35
_6.1.7601.17514_none_c7f0e16b547f887d.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143062
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-com-base-qfe-rpcss_31bf385
6ad364e35_6.1.7601.17514_none_c7f0e16b547f887d_rpcss.dll_fd3e269b
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 512000
INFO | MFT record first cluster --- 8596266
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35
_6.1.7601.17514_none_c7f0e16b547f887d_rpcss.dll_fd3e269b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143063
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-systemrestore-main_31bf385
6ad364e35_6.1.7601.17836_none_a4f23bc4c9ecea6f.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 16370
INFO | MFT record first cluster --- 1160828
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35
_6.1.7601.17836_none_a4f23bc4c9ecea6f.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed

INFO | Start of getting file parametres(size, time, date)


INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143064
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335345552.gif
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 7837
INFO | MFT record first cluster --- 6763006
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335345552.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143065
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- 1335407451.gif
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 8732
INFO | MFT record first cluster --- 1081633
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: 1335407451.gif
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143066
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-arial_31bf38
56ad364e35_6.1.7601.17621_none_d09ba6bac4056b40.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 7490
INFO | MFT record first cluster --- 3640805
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-arial_31bf3856ad364e3
5_6.1.7601.17621_none_d09ba6bac4056b40.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 143067


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-arial_31bf38
56ad364e35_6.1.7601.17621_none_d09ba6bac4056b40_ariali.ttf_a85a3504
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 555884
INFO | MFT record first cluster --- 8321224
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-arial_31bf3856ad364e3
5_6.1.7601.17621_none_d09ba6bac4056b40_ariali.ttf_a85a3504
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143068
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-arial_31bf38
56ad364e35_6.1.7601.17621_none_d09ba6bac4056b40_arialbi.ttf_d4cb707a
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 561924
INFO | MFT record first cluster --- 8435850
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-arial_31bf3856ad364e3
5_6.1.7601.17621_none_d09ba6bac4056b40_arialbi.ttf_d4cb707a
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143069
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-arial_31bf38
56ad364e35_6.1.7601.17621_none_d09ba6bac4056b40_arialbd.ttf_d4f87b8d
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 749004
INFO | MFT record first cluster --- 7805972
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-arial_31bf3856ad364e3
5_6.1.7601.17621_none_d09ba6bac4056b40_arialbd.ttf_d4f87b8d
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 143070


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-font-truetype-arial_31bf38
56ad364e35_6.1.7601.17621_none_d09ba6bac4056b40_arial.ttf_e828c109
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 778552
INFO | MFT record first cluster --- 5311813
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-font-truetype-arial_31bf3856ad364e3
5_6.1.7601.17621_none_d09ba6bac4056b40_arial.ttf_e828c109
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143071
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.
1.7601.17514_none_3d618e11ccc1f78a.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 10972
INFO | MFT record first cluster --- 4250304
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17
514_none_3d618e11ccc1f78a.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143072
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..ting-spooler-client_31bf3
856ad364e35_6.1.7601.17514_none_9535600a76efe991.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 2770
INFO | MFT record first cluster --- 5039408
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e
35_6.1.7601.17514_none_9535600a76efe991.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 143073


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.
1.7601.17514_none_3d618e11ccc1f78a_eventcls.dll_09ce86ba
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 16896
INFO | MFT record first cluster --- 2424336
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17
514_none_3d618e11ccc1f78a_eventcls.dll_09ce86ba
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143074
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-p..standardportmonitor_31bf3
856ad364e35_6.1.7600.16385_none_a39cec6c3a968733.manifest
INFO | MFT record parent dir --- 16200
INFO | MFT record file size --- 3411
INFO | MFT record first cluster --- 5035265
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-p..standardportmonitor_31bf3856ad364e
35_6.1.7600.16385_none_a39cec6c3a968733.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143075
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.
1.7601.17514_none_3d618e11ccc1f78a_vssapi.dll_51f72c64
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 1128448
INFO | MFT record first cluster --- 9018786
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17
514_none_3d618e11ccc1f78a_vssapi.dll_51f72c64
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!

INFO | --> read MFT record 143076


INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.
1.7601.17514_none_3d618e11ccc1f78a_vsstrace.dll_85c64e53
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 56320
INFO | MFT record first cluster --- 4810725
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17
514_none_3d618e11ccc1f78a_vsstrace.dll_85c64e53
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143077
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- ad.xml
INFO | MFT record parent dir --- 119972
INFO | MFT record file size --- 3636
INFO | MFT record first cluster --- 4298238
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: ad.xml
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143078
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- raiz_020[1].swf
INFO | MFT record parent dir --- 3119
INFO | MFT record file size --- 0
INFO | MFT record first cluster --- 0
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: raiz_020[1].swf
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143079
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-userenv_31bf3856ad364e35_6.1


.7601.17514_none_9247d45ea984f2ad.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 10305
INFO | MFT record first cluster --- 4264118
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.175
14_none_9247d45ea984f2ad.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143080
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-userenv_31bf3856ad364e35_6.1
.7601.17514_none_9247d45ea984f2ad_userenv.dll_1a3a70b6
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 81920
INFO | MFT record first cluster --- 7992078
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.175
14_none_9247d45ea984f2ad_userenv.dll_1a3a70b6
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143081
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-i..er-engine.resources_31bf3
856ad364e35_6.1.7601.17514_es-es_48f4b6ddbd2973ac.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3024
INFO | MFT record first cluster --- 5052746
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e
35_6.1.7601.17514_es-es_48f4b6ddbd2973ac.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143082
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- x86_microsoft-windows-i..er-engine.resources_31bf3


856ad364e35_6.1.7601.17514_es-es_48f4b6ddbd2973ac_msimsg.dll.mui_72e8994f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 91648
INFO | MFT record first cluster --- 6786030
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e
35_6.1.7601.17514_es-es_48f4b6ddbd2973ac_msimsg.dll.mui_72e8994f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143083
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-appid_31bf3856ad364e35_6.1
.7601.17514_none_b57215bac8c6d647.manifest
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 15080
INFO | MFT record first cluster --- 3385012
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.175
14_none_b57215bac8c6d647.manifest
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143084
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups
INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-appid_31bf3856ad364e35_6.1
.7601.17514_none_b57215bac8c6d647_appidcertstorecheck.exe_03352f5f
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 17920
INFO | MFT record first cluster --- 6786913
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.175
14_none_b57215bac8c6d647_appidcertstorecheck.exe_03352f5f
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, time, date)
INFO | !!!---Entering the parsing loop---!!!
INFO | !!!---End the parsing loop---!!!
INFO | --> read MFT record 143085
INFO | Mft read mode is FAST
INFO | Try to apply Sector Fixups
INFO | End of apply Sector Fixups

INFO | ------MFT RECORD DUMP-----INFO | MFT record name --- amd64_microsoft-windows-appid_31bf3856ad364e35_6.1


.7601.17514_none_b57215bac8c6d647_appid-ppdlic.xrm-ms_67ebc09b
INFO | MFT record parent dir --- 16195
INFO | MFT record file size --- 3013
INFO | MFT record first cluster --- 6591509
INFO | MFT record is directory --- 0
INFO | ------END OF MFT RECORD DUMP-----INFO | file name: amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.175
14_none_b57215bac8c6d647_appid-ppdlic.xrm-ms_67ebc09b
INFO | Constructing node entry for MFT entry
INFO | Node entry for MFT entry was successfully constructed
INFO | Start of getting file parametres(size, time, date)
INFO | End of getting file parametres(size, tim

You might also like