outlook 2013 something went wrong [SOLVED]

Please post your problem description here

Moderator: Barb@Invincea

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Mon Jul 31, 2017 8:16 pm

no hardware or software changes since start of thread, all office programs seem to run fine unboxed

followed the instructions and ran outlook in box. got the error msg <something went wrong> from all office programs.
In sbie cur ver (not the beta now inst) other office progs ran, but outlook would draw the window frame then hang, never displaying calender panel

sb.ini

Code: Select all

[GlobalSettings]

Template=OfficeClickToRun
Template=OfficeLicensing
Template=ComodoInternetSecurity
Template=LogitechSetPoint
TemplateReject=Logitech_G15_Keyboard
FileRootPath=D:\Sandbox\%USER%\%SANDBOX%
ExperimentalProtection64Bit=y
ActivationPrompt=n
ForceDisableSeconds=999999

#[Template_OfficeClickToRun]

#Tmpl.Title=Microsoft Office Click-to-Run (registered Sandboxie only)
#Tmpl.Class=Desktop
#Tmpl.Url=http://office.microsoft.com
#Tmpl.Scan=s
#Tmpl.ScanService=ClickToRunSvc
#HostInjectDll=C:\Program Files\Sec\Sandboxie\SboxHostDll.dll
#HostInjectDll64=c:\Program Files\Sec\Sandboxie\SboxHostDll.dll
#HostInjectProcess=OfficeClicktoRun.exe|ClickToRunSvc
#OpenIpcPath=\RPC Control\C2RClientAPI_Server_System*
#OpenIpcPath=\RPC Control\ClickToRun_Pipeline*
#OpenIpcPath=\RPC Control\AppV-ISV-*

#[Template_Office_Outlook]

#Tmpl.Title=Office Outlook
#Tmpl.Class=EmailReader
#ProcessGroup=<Office_Outlook>,outlook.exe
#OpenFilePath=<Office_Outlook>,%Tmpl.Office_Outlook%
#OpenFilePath=<Office_Outlook>,%AppData%\Microsoft\Outlook
#OpenFilePath=<Office_Outlook>,%Local AppData%\Microsoft\Outlook
#OpenFilePath=<Office_Outlook>,d:\users\%user%\outlook files
#OpenFilePath=outlook.exe,*.eml
#OpenKeyPath=<Office_Outlook>,HKEY_CURRENT_USER\Software\Microsoft\Office
#OpenKeyPath=<Office_Outlook>,HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager
#OpenKeyPath=<Office_Outlook>,HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
# Outlook pst locks
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\OLKCRPC.OBJ=*
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\MAPI-HP*
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_WCIDXPACKED
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_WCEMPTY
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_WCWRITE
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_WCINFO
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_CACHEMUTEX
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\*_NDB_ZOMBIE
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\NDB_ROOT_MUTEX
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\Shared-NDB-FE
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\Optex_*_LogOptex
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects*\OfficeSharedLocks_*
#OpenIpcPath=<Office_Outlook>,*\BaseNamedObjects\WMS Notif Engine*
#OpenWinClass=<Office_Outlook>,WMS ST Notif Class
# Integration with Windows Desktop Search
#OpenClsid={7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
#OpenClsid={9E175B6D-F52A-11D8-B9A5-505054503030}
#OpenPipePath=\Device\NamedPipe\MsFteWds

[UserSettings_0C600210]

SbieCtrl_UserName=grahm
SbieCtrl_NextUpdateCheck=1501587995
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_WindowCoords=462,228,707,455
SbieCtrl_ActiveView=40022
SbieCtrl_HideWindowNotify=n
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=n
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_TerminateWarn=n
SbieCtrl_AutoApplySettings=n
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_RecoverTarget=E:\Docs & Sets\Grahm\My Documents\Cent\Sem-3\rach-212
SbieCtrl_RecoverTarget=D:\Users\Grahm\Downloads
SbieCtrl_RecoverTarget=E:\Docs & Sets\Grahm\My Documents\GamSav\AoW\Scenario
SbieCtrl_SaveRecoverTargets=y
SbieCtrl_BoxExpandedView=DefaultBox,FireFox,Outlook,test,TorBrowser


[DefaultBox]

ConfigLevel=7
AutoRecover=y
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=E:\Install\OpSrc
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
DropAdminRights=y
Enabled=y
AutoDelete=y
NeverDelete=n
ForceProcess=iexplore.exe
ForceProcess=plugin-container.exe
ForceProcess=firefox.exe
BoxNameTitle=y

[TorBrowser]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
BoxNameTitle=y

[FireFox]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=E:\Docs & Sets\Grahm
RecoverFolder=E:\Install\OpSrc
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
BoxNameTitle=y

[Outlook]

Enabled=y
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=Office_Outlook
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
BoxNameTitle=-
#OpenWinClass=mspim_wnd32
monitor dump

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume1
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume5
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
(Drive)     \Device\HarddiskVolume8
(Drive)     \Device\HarddiskVolume9
(Drive)     \Device\ImDisk0
Clsid       -------------------------------
Clsid       {00021401-0000-0000-C000-000000000046} Shortcut
File/Key    -------------------------------
Image       -------------------------------
Image       *:\program files\microsoft office 15\clientx64\officec2rclient.exe
Image       *:\program files\microsoft office 15\root\office15\outlook.exe
Image       *:\program files\sec\sandboxie\sandboxiedcomlaunch.exe
Image       *:\program files\sec\sandboxie\sandboxierpcss.exe
Image       *:\program files\sec\sandboxie\start.exe
Image       c:\program files (x86)\utl\dexpot\hooxpot64.dll
Image       c:\program files\microsoft office 15\clientx64\apiclient.dll
Image       c:\program files\microsoft office 15\clientx64\c2rui.dll
Image       c:\program files\microsoft office 15\clientx64\msvcp100.dll
Image       c:\program files\microsoft office 15\clientx64\msvcr100.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvstream64.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvsubsystems64.dll
Image       c:\program files\microsoft office 15\root\office15\c2r64.dll
Image       c:\program files\microsoft office 15\root\office15\msvcp100.dll
Image       c:\program files\microsoft office 15\root\office15\msvcr100.dll
Image       c:\program files\sec\sandboxie\sbiedll.dll
Image       c:\windows\system32\advapi32.dll
Image       c:\windows\system32\apphelp.dll
Image       c:\windows\system32\cfgmgr32.dll
Image       c:\windows\system32\clbcatq.dll
Image       c:\windows\system32\comdlg32.dll
Image       c:\windows\system32\credssp.dll
Image       c:\windows\system32\cryptbase.dll
Image       c:\windows\system32\cryptsp.dll
Image       c:\windows\system32\devobj.dll
Image       c:\windows\system32\dwmapi.dll
Image       c:\windows\system32\gdi32.dll
Image       c:\windows\system32\imm32.dll
Image       c:\windows\system32\kernel32.dll
Image       c:\windows\system32\kernelbase.dll
Image       c:\windows\system32\lpk.dll
Image       c:\windows\system32\msctf.dll
Image       c:\windows\system32\msvcr100.dll
Image       c:\windows\system32\msvcrt.dll
Image       c:\windows\system32\nsi.dll
Image       c:\windows\system32\ntdll.dll
Image       c:\windows\system32\ntmarta.dll
Image       c:\windows\system32\ole32.dll
Image       c:\windows\system32\oleaut32.dll
Image       c:\windows\system32\powrprof.dll
Image       c:\windows\system32\profapi.dll
Image       c:\windows\system32\propsys.dll
Image       c:\windows\system32\psapi.dll
Image       c:\windows\system32\rpcepmap.dll
Image       c:\windows\system32\rpcrt4.dll
Image       c:\windows\system32\rpcrtremote.dll
Image       c:\windows\system32\rpcss.dll
Image       c:\windows\system32\rsaenh.dll
Image       c:\windows\system32\sechost.dll
Image       c:\windows\system32\secur32.dll
Image       c:\windows\system32\setupapi.dll
Image       c:\windows\system32\shell32.dll
Image       c:\windows\system32\shlwapi.dll
Image       c:\windows\system32\sspicli.dll
Image       c:\windows\system32\sxs.dll
Image       c:\windows\system32\user32.dll
Image       c:\windows\system32\userenv.dll
Image       c:\windows\system32\usp10.dll
Image       c:\windows\system32\uxtheme.dll
Image       c:\windows\system32\version.dll
Image       c:\windows\system32\wer.dll
Image       c:\windows\system32\windowscodecs.dll
Image       c:\windows\system32\wldap32.dll
Image       c:\windows\system32\ws2_32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_14556b8e8b95d1fc\gdiplus.dll
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000030.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\plugplay
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000030.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000002b.db
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\ErrorUI_8004_0
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2708
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5156
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7244
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8004
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9140
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USERENV.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\C2RClientAPI_Server_System
Ipc      O  \RPC Control\ClickToRun_Pipeline
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\umpo
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfActivated.Default1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Pipe        -------------------------------
Pipe        \Device\00000085
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\HarddiskVolume8
Pipe        \Device\HarddiskVolume9
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP12
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd
tried uncommenting the sb.ini officecliktorun to point to sbie prog dir still got the same error.
had to manually add panda cloud av, no change. I also use malwarebytes pro and that may have security hooks in office progs
Should i revert to the release ver?

APMichael
Posts: 152
Joined: Sun Sep 07, 2014 5:54 am
Location: Germany

Re: outlook 2013 something went wrong [SOLVED]

Post by APMichael » Tue Aug 01, 2017 6:11 am

If you have changed the installation path of Sandboxie, the default template "OfficeClickToRun" won't work. I'm not sure, but I think that just copying a template from Templates.ini to Sandboxie.ini doesn't work also. (Usually you have to rename templates and change their class to "Local".)

So, you could try the following:
- Remove both templates from your Sandboxie.ini.
- Add the following line to the settings for the box [Outlook]:

Code: Select all

OpenFilePath=<Office_Outlook>,%userprofile%\outlook files
- Save the changes.
- Run Notepad as Admin, open the file Templates.ini and search for [Template_OfficeClickToRun].
- Correct the path for "HostInjectDll=" and "HostInjectDll64=":

Code: Select all

HostInjectDll=C:\Program Files\Sec\Sandboxie\SboxHostDll.dll
HostInjectDll64=C:\Program Files\Sec\Sandboxie\SboxHostDll.dll
- Save the changes and reboot Windows.

Unfortunately, you have to do the Templates.ini corrections after every version update of Sandboxie! (I hope the devs will include a better solution soon.)

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Fri Aug 04, 2017 3:23 am

well thats progress. unfortunetly it only got me back to the stage that prompted me to reopen this thread

outlook starts up, it displays the splash screen, then opens a window with outlook title and draws the outlook file tab and bottom status bar.
thats as far as it goes with the hour glass swirl & if you click in the widow the title changes to outlook (not responding)

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume1
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume5
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
(Drive)     \Device\HarddiskVolume8
(Drive)     \Device\HarddiskVolume9
(Drive)     \Device\ImDisk0
Clsid       -------------------------------
Clsid       {00000341-0000-0000-C000-000000000046} ?
Clsid       {C39EE728-D419-4BD4-A3EF-EDA059DBD935} WinInetBroker Class
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid    O  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Image       *:\program files\microsoft office 15\root\office15\outlook.exe
Image       *:\program files\sec\sandboxie\sandboxiedcomlaunch.exe
Image       *:\program files\sec\sandboxie\sandboxierpcss.exe
Image       *:\program files\sec\sandboxie\start.exe
Image       *:\windows\system32\dllhost.exe
Image       c:\program files (x86)\utl\dexpot\hooxpot64.dll
Image       c:\program files\common files\microsoft shared\office15\mso.dll
Image       c:\program files\common files\microsoft shared\office15\msptls.dll
Image       c:\program files\common files\microsoft shared\office15\riched20.dll
Image       c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppc.dll
Image       c:\program files\microsoft office 15\root\office15\1033\mapir.dll
Image       c:\program files\microsoft office 15\root\office15\1033\outllibr.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvstream64.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvsubsystems64.dll
Image       c:\program files\microsoft office 15\root\office15\c2r64.dll
Image       c:\program files\microsoft office 15\root\office15\contab32.dll
Image       c:\program files\microsoft office 15\root\office15\emsmdb32.dll
Image       c:\program files\microsoft office 15\root\office15\intldate.dll
Image       c:\program files\microsoft office 15\root\office15\mspst32.dll
Image       c:\program files\microsoft office 15\root\office15\msvcp100.dll
Image       c:\program files\microsoft office 15\root\office15\msvcr100.dll
Image       c:\program files\microsoft office 15\root\office15\oart.dll
Image       c:\program files\microsoft office 15\root\office15\olmapi32.dll
Image       c:\program files\microsoft office 15\root\office15\outlmime.dll
Image       c:\program files\microsoft office 15\root\office15\pstprx32.dll
Image       c:\program files\microsoft office 15\root\office15\wwlib.dll
Image       c:\program files\sec\sandboxie\sbiedll.dll
Image       c:\windows\microsoft.net\framework64\v4.0.30319\mscoreei.dll
Image       c:\windows\system32\actxprxy.dll
Image       c:\windows\system32\advapi32.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
Image       c:\windows\system32\aticfx64.dll
Image       c:\windows\system32\atidxx64.dll
Image       c:\windows\system32\atiuxp64.dll
Image       c:\windows\system32\atl.dll
Image       c:\windows\system32\bcrypt.dll
Image       c:\windows\system32\bcryptprimitives.dll
Image       c:\windows\system32\cfgmgr32.dll
Image       c:\windows\system32\clbcatq.dll
Image       c:\windows\system32\comdlg32.dll
Image       c:\windows\system32\credssp.dll
Image       c:\windows\system32\crypt32.dll
Image       c:\windows\system32\cryptbase.dll
Image       c:\windows\system32\cryptsp.dll
Image       c:\windows\system32\d2d1.dll
Image       c:\windows\system32\d3d10_1.dll
Image       c:\windows\system32\d3d10_1core.dll
Image       c:\windows\system32\d3d10warp.dll
Image       c:\windows\system32\d3d11.dll
Image       c:\windows\system32\davclnt.dll
Image       c:\windows\system32\davhlpr.dll
Image       c:\windows\system32\devobj.dll
Image       c:\windows\system32\dhcpcsvc.dll
Image       c:\windows\system32\dhcpcsvc6.dll
Image       c:\windows\system32\dnsapi.dll
Image       c:\windows\system32\dui70.dll
Image       c:\windows\system32\duser.dll
Image       c:\windows\system32\dwmapi.dll
Image       c:\windows\system32\dwrite.dll
Image       c:\windows\system32\dxgi.dll
Image       c:\windows\system32\explorerframe.dll
Image       c:\windows\system32\fwpuclnt.dll
Image       c:\windows\system32\gdi32.dll
Image       c:\windows\system32\iertutil.dll
Image       c:\windows\system32\imm32.dll
Image       c:\windows\system32\iphlpapi.dll
Image       c:\windows\system32\kernel32.dll
Image       c:\windows\system32\kernelbase.dll
Image       c:\windows\system32\lpk.dll
Image       c:\windows\system32\mlang.dll
Image       c:\windows\system32\msasn1.dll
Image       c:\windows\system32\mscoree.dll
Image       c:\windows\system32\msctf.dll
Image       c:\windows\system32\msi.dll
Image       c:\windows\system32\msimg32.dll
Image       c:\windows\system32\mssprxy.dll
Image       c:\windows\system32\msvcr100.dll
Image       c:\windows\system32\msvcrt.dll
Image       c:\windows\system32\mswsock.dll
Image       c:\windows\system32\napinsp.dll
Image       c:\windows\system32\ncrypt.dll
Image       c:\windows\system32\netprofm.dll
Image       c:\windows\system32\nlaapi.dll
Image       c:\windows\system32\normaliz.dll
Image       c:\windows\system32\npmproxy.dll
Image       c:\windows\system32\nsi.dll
Image       c:\windows\system32\ntdll.dll
Image       c:\windows\system32\ntmarta.dll
Image       c:\windows\system32\ole32.dll
Image       c:\windows\system32\oleaut32.dll
Image       c:\windows\system32\pnrpnsp.dll
Image       c:\windows\system32\powrprof.dll
Image       c:\windows\system32\profapi.dll
Image       c:\windows\system32\propsys.dll
Image       c:\windows\system32\psapi.dll
Image       c:\windows\system32\pstorec.dll
Image       c:\windows\system32\rasadhlp.dll
Image       c:\windows\system32\rpcepmap.dll
Image       c:\windows\system32\rpcrt4.dll
Image       c:\windows\system32\rpcrtremote.dll
Image       c:\windows\system32\rpcss.dll
Image       c:\windows\system32\rsaenh.dll
Image       c:\windows\system32\schannel.dll
Image       c:\windows\system32\sechost.dll
Image       c:\windows\system32\secur32.dll
Image       c:\windows\system32\setupapi.dll
Image       c:\windows\system32\sfc.dll
Image       c:\windows\system32\sfc_os.dll
Image       c:\windows\system32\shell32.dll
Image       c:\windows\system32\shlwapi.dll
Image       c:\windows\system32\sspicli.dll
Image       c:\windows\system32\structuredquery.dll
Image       c:\windows\system32\sxs.dll
Image       c:\windows\system32\tquery.dll
Image       c:\windows\system32\urlmon.dll
Image       c:\windows\system32\user32.dll
Image       c:\windows\system32\userenv.dll
Image       c:\windows\system32\usp10.dll
Image       c:\windows\system32\uxtheme.dll
Image       c:\windows\system32\version.dll
Image       c:\windows\system32\webio.dll
Image       c:\windows\system32\webservices.dll
Image       c:\windows\system32\windowscodecs.dll
Image       c:\windows\system32\winhttp.dll
Image       c:\windows\system32\wininet.dll
Image       c:\windows\system32\winnsi.dll
Image       c:\windows\system32\winrnr.dll
Image       c:\windows\system32\wintrust.dll
Image       c:\windows\system32\wldap32.dll
Image       c:\windows\system32\ws2_32.dll
Image       c:\windows\system32\wship6.dll
Image       c:\windows\system32\wshtcpip.dll
Image       c:\windows\system32\wsock32.dll
Image       c:\windows\system32\wtsapi32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_14556b8e8b95d1fc\gdiplus.dll
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\OLE1986DE13E01E4B5CA3BEFF70F40D
Ipc         \RPC Control\OLEEBAC18A3609B49BFAF0F7656C0DC
Ipc         \RPC Control\plugplay
Ipc         \RPC Control\protected_storage
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\_outlook_keepalive_
Ipc         \Sessions\1\BaseNamedObjects\_outlook_mutex_
Ipc         \Sessions\1\BaseNamedObjects\{A1D62C73-3712-4bf7-A524-ACE967A8C7D7}
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}15.0
Ipc         \Sessions\1\BaseNamedObjects\{F99C425F-9135-43ed-BD7D-396DE488DC53}
Ipc         \Sessions\1\BaseNamedObjects\01308C1B-69EF-4060-B8E0-FEB12C8E2EE1_756
Ipc         \Sessions\1\BaseNamedObjects\4D4150494C6F676F6E0070B872C47FD7101B8BEA00AA0038C699_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B403751AB41D9784F888C4CBA79C0A9F8_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B7A17BFD72D903D46B1F505B800B560F9_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B7A17BFD72D903D46B1F505B800B560F902_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B97CEBC714064CE43AE227A1CE9A91CFC_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A02_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A04_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A06_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BC01872CB0F8AFF4395D7D5A654BA2177_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BC01872CB0F8AFF4395D7D5A654BA217702_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D02_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D04_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D06_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::756
Ipc         \Sessions\1\BaseNamedObjects\AppVVirtual-756
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000002b.db
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\DwmComposedEvent_1
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheLogonEvent-82664d282c932c4d97de7dff41f1128d-Outlook
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheLogonEvent-a608d9e56cad46479cc4fdfeb2507199-Outlook
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwner-d:/Users/*****/AppData/Local/Microsoft/Outlook/grey.7@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwner-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwnerMutex-d:/Users/*****/AppData/Local/Microsoft/Outlook/grey.7@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwnerMutex-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041319750000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041919800000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!044895830000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!2E7242600000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4154494F0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4D4170490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4E469F490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027C84F0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CE860000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CE870000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CE880000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CF410000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CF420000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027CF430000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D1A20000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D1A30000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D1A40000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D27C0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D27D0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D27E0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D3560000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D3570000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8027D3580000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000090
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000208
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000380
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB200000000000004F8
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000670
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\PSTPRXEIDGENMUTEX
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1972
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6960
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7528
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_756
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8076
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_*****
Ipc         \Sessions\1\BaseNamedObjects\WatsonDataAccess
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\x64_10ACB_GETTING_DATA10_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACB_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACBBD_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACB10_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACBPIDS_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex.REC=(EXCHPERF.8484fa313f7eddb2cfcccd43)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-advapi32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-normaliz-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-ole32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-user32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-version-l1-1-0.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\IERTUTIL.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NORMALIZ.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\URLMON.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USERENV.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WININET.dll
Ipc      O  \KnownDlls\WINTRUST.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8AppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8vfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System
Ipc      O  \RPC Control\ClickToRun_Pipeline
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\umpo
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\Dwm-7FDA-ApiPort-1E05
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfActivated.Default1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_ProcessEvent_00_01_02F4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_658027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_658027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_658027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_668027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_668027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_668027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_678027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_678027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_678027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_688027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_688027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_688027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_698027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_698027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_698027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_658027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_658027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_658027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_668027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_668027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_668027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_678027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_678027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_678027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_688027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_688027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_688027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_698027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_698027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_698027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027C84F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CE87_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CE88_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CF42_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027CF43_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D1A2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D1A3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D1A4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D27D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D27E_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D356_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D357_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8027D358_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027C84F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CE87_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CE88_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CF42_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027CF43_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D1A2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D1A3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D1A4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D27D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D27E_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D356_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D357_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8027D358_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_4E444100_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8027CE86_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8027CF41_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8027D1A2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8027D27C_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8027D356_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_ProcessEvent_00_01_02F4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedPTBHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=Event.REC=(CANCEL.ALL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemory.REC=(GLOBAL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:No Notifs Event:0x00001940
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:Notify Semaphore:0x00001940
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Ipc      O  \UxSmsApiPort
Pipe        -------------------------------
Pipe        \Device\00000084
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\HarddiskVolume8
Pipe        \Device\HarddiskVolume9
Pipe        \Device\ImDisk0
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP12
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
Pipe     O  \Device\NamedPipe
Pipe     O  \Device\NamedPipe\
Pipe     O  \device\namedpipe\MsFteWds
Pipe     O  \Device\NamedPipe\MsFteWds
Pipe     O  \device\namedpipe\msftewds
Pipe     O  \Device\NetBT_Tcpip_{4F5E8353-19C4-427A-A1E3-E4632E25EB27}
Pipe     O  \Device\NetBT_Tcpip_{DE226F90-9A91-47E3-AF0A-653B7B027172}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  OleMainThreadWndClass
WinCls   O  Shell_TrayWnd
WinCls   O  WMS ST Notif Class
WinCls   X  mspim_wnd32
a thought: malwarebytes pro/prem integrates mb-anti exploit, which needed a template added to sb.ini; but it's hard to believe, after all this time, i'm the first to encounter this conflict

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Fri Aug 04, 2017 3:59 am

added viewtopic.php?f=11&t=13038

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume1
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume5
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
(Drive)     \Device\HarddiskVolume8
(Drive)     \Device\HarddiskVolume9
(Drive)     \Device\ImDisk0
Clsid       -------------------------------
Clsid       {00000341-0000-0000-C000-000000000046} ?
Clsid       {C39EE728-D419-4BD4-A3EF-EDA059DBD935} WinInetBroker Class
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid    O  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Image       *:\program files\microsoft office 15\root\office15\outlook.exe
Image       *:\program files\sec\sandboxie\sandboxiedcomlaunch.exe
Image       *:\program files\sec\sandboxie\sandboxierpcss.exe
Image       *:\program files\sec\sandboxie\start.exe
Image       *:\windows\system32\dllhost.exe
Image       c:\program files (x86)\utl\dexpot\hooxpot64.dll
Image       c:\program files\common files\microsoft shared\office15\mso.dll
Image       c:\program files\common files\microsoft shared\office15\msptls.dll
Image       c:\program files\common files\microsoft shared\office15\riched20.dll
Image       c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppc.dll
Image       c:\program files\microsoft office 15\root\office15\1033\mapir.dll
Image       c:\program files\microsoft office 15\root\office15\1033\outllibr.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvstream64.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvsubsystems64.dll
Image       c:\program files\microsoft office 15\root\office15\c2r64.dll
Image       c:\program files\microsoft office 15\root\office15\contab32.dll
Image       c:\program files\microsoft office 15\root\office15\emsmdb32.dll
Image       c:\program files\microsoft office 15\root\office15\intldate.dll
Image       c:\program files\microsoft office 15\root\office15\mspst32.dll
Image       c:\program files\microsoft office 15\root\office15\msvcp100.dll
Image       c:\program files\microsoft office 15\root\office15\msvcr100.dll
Image       c:\program files\microsoft office 15\root\office15\oart.dll
Image       c:\program files\microsoft office 15\root\office15\olmapi32.dll
Image       c:\program files\microsoft office 15\root\office15\outlmime.dll
Image       c:\program files\microsoft office 15\root\office15\pstprx32.dll
Image       c:\program files\microsoft office 15\root\office15\wwlib.dll
Image       c:\program files\sec\sandboxie\sbiedll.dll
Image       c:\windows\microsoft.net\framework64\v4.0.30319\mscoreei.dll
Image       c:\windows\system32\actxprxy.dll
Image       c:\windows\system32\advapi32.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
Image       c:\windows\system32\aticfx64.dll
Image       c:\windows\system32\atidxx64.dll
Image       c:\windows\system32\atiuxp64.dll
Image       c:\windows\system32\atl.dll
Image       c:\windows\system32\bcrypt.dll
Image       c:\windows\system32\bcryptprimitives.dll
Image       c:\windows\system32\cfgmgr32.dll
Image       c:\windows\system32\clbcatq.dll
Image       c:\windows\system32\comdlg32.dll
Image       c:\windows\system32\credssp.dll
Image       c:\windows\system32\crypt32.dll
Image       c:\windows\system32\cryptbase.dll
Image       c:\windows\system32\cryptsp.dll
Image       c:\windows\system32\d2d1.dll
Image       c:\windows\system32\d3d10_1.dll
Image       c:\windows\system32\d3d10_1core.dll
Image       c:\windows\system32\d3d10warp.dll
Image       c:\windows\system32\d3d11.dll
Image       c:\windows\system32\davclnt.dll
Image       c:\windows\system32\davhlpr.dll
Image       c:\windows\system32\devobj.dll
Image       c:\windows\system32\dhcpcsvc.dll
Image       c:\windows\system32\dhcpcsvc6.dll
Image       c:\windows\system32\dnsapi.dll
Image       c:\windows\system32\dui70.dll
Image       c:\windows\system32\duser.dll
Image       c:\windows\system32\dwmapi.dll
Image       c:\windows\system32\dwrite.dll
Image       c:\windows\system32\dxgi.dll
Image       c:\windows\system32\explorerframe.dll
Image       c:\windows\system32\fwpuclnt.dll
Image       c:\windows\system32\gdi32.dll
Image       c:\windows\system32\iertutil.dll
Image       c:\windows\system32\imm32.dll
Image       c:\windows\system32\iphlpapi.dll
Image       c:\windows\system32\kernel32.dll
Image       c:\windows\system32\kernelbase.dll
Image       c:\windows\system32\lpk.dll
Image       c:\windows\system32\mlang.dll
Image       c:\windows\system32\msasn1.dll
Image       c:\windows\system32\mscoree.dll
Image       c:\windows\system32\msctf.dll
Image       c:\windows\system32\msi.dll
Image       c:\windows\system32\msimg32.dll
Image       c:\windows\system32\mssprxy.dll
Image       c:\windows\system32\msvcr100.dll
Image       c:\windows\system32\msvcrt.dll
Image       c:\windows\system32\mswsock.dll
Image       c:\windows\system32\napinsp.dll
Image       c:\windows\system32\ncrypt.dll
Image       c:\windows\system32\netprofm.dll
Image       c:\windows\system32\nlaapi.dll
Image       c:\windows\system32\normaliz.dll
Image       c:\windows\system32\npmproxy.dll
Image       c:\windows\system32\nsi.dll
Image       c:\windows\system32\ntdll.dll
Image       c:\windows\system32\ntmarta.dll
Image       c:\windows\system32\ole32.dll
Image       c:\windows\system32\oleaut32.dll
Image       c:\windows\system32\pnrpnsp.dll
Image       c:\windows\system32\powrprof.dll
Image       c:\windows\system32\profapi.dll
Image       c:\windows\system32\propsys.dll
Image       c:\windows\system32\psapi.dll
Image       c:\windows\system32\pstorec.dll
Image       c:\windows\system32\rasadhlp.dll
Image       c:\windows\system32\rpcepmap.dll
Image       c:\windows\system32\rpcrt4.dll
Image       c:\windows\system32\rpcrtremote.dll
Image       c:\windows\system32\rpcss.dll
Image       c:\windows\system32\rsaenh.dll
Image       c:\windows\system32\schannel.dll
Image       c:\windows\system32\sechost.dll
Image       c:\windows\system32\secur32.dll
Image       c:\windows\system32\setupapi.dll
Image       c:\windows\system32\sfc.dll
Image       c:\windows\system32\sfc_os.dll
Image       c:\windows\system32\shell32.dll
Image       c:\windows\system32\shlwapi.dll
Image       c:\windows\system32\sspicli.dll
Image       c:\windows\system32\structuredquery.dll
Image       c:\windows\system32\sxs.dll
Image       c:\windows\system32\tquery.dll
Image       c:\windows\system32\urlmon.dll
Image       c:\windows\system32\user32.dll
Image       c:\windows\system32\userenv.dll
Image       c:\windows\system32\usp10.dll
Image       c:\windows\system32\uxtheme.dll
Image       c:\windows\system32\version.dll
Image       c:\windows\system32\webio.dll
Image       c:\windows\system32\webservices.dll
Image       c:\windows\system32\windowscodecs.dll
Image       c:\windows\system32\winhttp.dll
Image       c:\windows\system32\wininet.dll
Image       c:\windows\system32\winnsi.dll
Image       c:\windows\system32\winrnr.dll
Image       c:\windows\system32\wintrust.dll
Image       c:\windows\system32\wldap32.dll
Image       c:\windows\system32\ws2_32.dll
Image       c:\windows\system32\wship6.dll
Image       c:\windows\system32\wshtcpip.dll
Image       c:\windows\system32\wsock32.dll
Image       c:\windows\system32\wtsapi32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_14556b8e8b95d1fc\gdiplus.dll
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\OLE69E5C38E15464143839D44AC0420
Ipc         \RPC Control\OLE8144E92CFC404AE3B492916E3AC6
Ipc         \RPC Control\plugplay
Ipc         \RPC Control\protected_storage
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\_outlook_keepalive_
Ipc         \Sessions\1\BaseNamedObjects\_outlook_mutex_
Ipc         \Sessions\1\BaseNamedObjects\{A1D62C73-3712-4bf7-A524-ACE967A8C7D7}
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}15.0
Ipc         \Sessions\1\BaseNamedObjects\{F99C425F-9135-43ed-BD7D-396DE488DC53}
Ipc         \Sessions\1\BaseNamedObjects\01308C1B-69EF-4060-B8E0-FEB12C8E2EE1_3576
Ipc         \Sessions\1\BaseNamedObjects\4D4150494C6F676F6E0070B872C47FD7101B8BEA00AA0038C699_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B403751AB41D9784F888C4CBA79C0A9F8_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B7A17BFD72D903D46B1F505B800B560F9_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B7A17BFD72D903D46B1F505B800B560F902_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6B97CEBC714064CE43AE227A1CE9A91CFC_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A02_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A04_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BBDF452C9E5E78E4AB4B89CF11E8E741A06_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BC01872CB0F8AFF4395D7D5A654BA2177_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BC01872CB0F8AFF4395D7D5A654BA217702_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D02_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D04_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\4F75746C6F6F6BEE0CBBC3B766BC44ADF0216835B7F74D06_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::3576
Ipc         \Sessions\1\BaseNamedObjects\AppVVirtual-3576
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000002b.db
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\DwmComposedEvent_1
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheLogonEvent-82664d282c932c4d97de7dff41f1128d-Outlook
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheLogonEvent-a608d9e56cad46479cc4fdfeb2507199-Outlook
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwner-d:/Users/*****/AppData/Local/Microsoft/Outlook/grey.7@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwner-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwnerMutex-d:/Users/*****/AppData/Local/Microsoft/Outlook/grey.7@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwnerMutex-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com.ost
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041319750000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041919800000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!044895830000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!2E7242600000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4154494F0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4D4170490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4E469F490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803292230000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803296E30000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803296E40000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803296E50000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803297600000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803297610000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803297620000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299150000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299160000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299170000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299820000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299830000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!803299840000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!80329A3D0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!80329A3E0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!80329A3F0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000090
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000208
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000380
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB200000000000004F8
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000670
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\PSTPRXEIDGENMUTEX
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2956
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3104
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3576
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6344
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7328
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_*****
Ipc         \Sessions\1\BaseNamedObjects\WatsonDataAccess
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\x64_10ACB_GETTING_DATA10_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACB_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACBBD_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACB10_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACBPIDS_S-1-5-5-0-369607
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex.REC=(EXCHPERF.8484fa313f7eddb2cfcccd43)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-advapi32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-normaliz-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-ole32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-user32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-version-l1-1-0.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\IERTUTIL.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NORMALIZ.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\URLMON.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USERENV.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WININET.dll
Ipc      O  \KnownDlls\WINTRUST.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8AppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8vfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System
Ipc      O  \RPC Control\ClickToRun_Pipeline
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\umpo
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6002610000000065B0_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D6003C9000000006928_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D600542000000006C58_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60F4A3FFFFFFFFBD84_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\Dwm-7FDA-ApiPort-1E05
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\EBE11930E827FFFFFFFFBD18_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfActivated.Default1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_ProcessEvent_00_01_0DF8_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_65803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6580329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6580329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_66803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6680329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6680329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_67803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6780329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6780329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_68803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6880329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6880329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_69803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6980329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6980329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_65803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6580329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6580329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_66803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6680329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6680329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_67803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6780329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6780329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_68803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6880329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6880329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_69803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6980329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6980329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329223_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A803296E4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A803296E5_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329761_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329762_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329915_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329916_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329917_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329983_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329984_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329A3D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329A3E_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A80329A3F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329223_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B803296E4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B803296E5_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329761_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329762_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329915_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329916_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329917_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329983_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329984_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329A3D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329A3E_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B80329A3F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_4E444100_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E803296E3_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E80329760_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E80329915_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E80329982_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E80329A3D_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_ProcessEvent_00_01_0DF8_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedPTBHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=Event.REC=(CANCEL.ALL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemory.REC=(GLOBAL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:No Notifs Event:0x00000528
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:Notify Semaphore:0x00000528
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Ipc      O  \UxSmsApiPort
Pipe        -------------------------------
Pipe        \Device\00000084
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\HarddiskVolume8
Pipe        \Device\HarddiskVolume9
Pipe        \Device\ImDisk0
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP12
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
Pipe     O  \Device\NamedPipe
Pipe     O  \Device\NamedPipe\
Pipe     O  \device\namedpipe\MsFteWds
Pipe     O  \Device\NamedPipe\MsFteWds
Pipe     O  \device\namedpipe\msftewds
Pipe     O  \Device\NetBT_Tcpip_{4F5E8353-19C4-427A-A1E3-E4632E25EB27}
Pipe     O  \Device\NetBT_Tcpip_{DE226F90-9A91-47E3-AF0A-653B7B027172}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  mspim_wnd32
WinCls   O  OleMainThreadWndClass
WinCls   O  Shell_TrayWnd
WinCls   O  WMS ST Notif Class

APMichael
Posts: 152
Joined: Sun Sep 07, 2014 5:54 am
Location: Germany

Re: outlook 2013 something went wrong [SOLVED]

Post by APMichael » Fri Aug 04, 2017 4:12 am

Strange! :? Did you run Outlook in the sandbox named "Outlook"? Do Word and Excel work now?

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by Barb@Invincea » Fri Aug 04, 2017 11:09 am

Hello grahm,

Did you have a chance to try this?:
The latest beta addresses several issues with Office, you may want to give it a go:
viewtopic.php?f=62&t=24690

Please try creating a new Sandbox with default settings, add the Outlook email reader template and re-try using Outlook.
Be sure to add BoxNameTitle=- to your config file to avoid freezing issues when you receive a reminder.
Before you do that, you will need to set up Outlook outside Sandoxie and ensure it is working fine (and set up properly, incuding a new profile if needed). Once you have ran it outside SBIE, go ahead and launch it Sandboxed in the new Sandbox as explained above.
If default settings (you will still have to do this viewtopic.php?f=2&t=23015&hilit=somethi ... 15#p122303 as well as the no-title settings ) do not work after having followed the above listed steps, I suggest you create a new Outlook profile, just for testing, and see if that works in the Sandbox (after you create it and launch it outside Sbie).

Any chance this applies to your scenario?:
viewtopic.php?f=11&t=23237#p123266

Regards,
Barb.-

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Sat Aug 05, 2017 1:18 pm

yes, i'm using the beta, etc; you told me to try installing.
i tried creating and using a new profile, unboxed it works/boxed it hangs on the outlook splash screen on processing...

outlook (with new profile) and office programs work fine un-sandboxed
sand boxed: word,access,one note,publish,power point good; excel directly (no splash screen) gives empty error window

the last item to try; i believe is talking about outlook not finding the pst file, I give it a path in <OpenFilePath=<Office_Outlook>,%userprofile%\outlook files> in sb.ini and the monitor dump does not show the resource blocked/not found

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by Barb@Invincea » Mon Aug 07, 2017 11:14 am

Hi grahm,

Do you have any add-ons installed in Office? If so, please remove them and re-try launching it Sandboxed after deleting the contents of your Sandbox.
sand boxed: word,access,one note,publish,power point good; excel directly (no splash screen) gives empty error window
Is there a specific error? What are you seeing exactly?

Do other applications work in the Sandbox?
Try disabling / removing your Security software (AV and MWBS) to see if there is any conflict with those (sometimes disabling it doesn't do the trick and you may need to fully remove them).

Please provide the results of your Resource Access Monitor when using a fresh Sandbox and default settings.
Also, please provide your current Sandboxie.ini file.
the last item to try; i believe is talking about outlook not finding the pst file
Can you please test adding a different account to a new outlook profile and selecting a standard location for the pst file?

Regards,
Barb.-

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Tue Aug 08, 2017 4:44 pm

actually i re-redid the profile replacement and it started working

I'll repost if anything starts acting wonky. i'm still playing with excel

grahm
Posts: 27
Joined: Fri May 20, 2016 12:19 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by grahm » Thu Aug 10, 2017 1:06 pm

I didn't have auto delete set on outlook sandbox and accidentally deleted the contents (outlook&personal.pst)
Now outlook is hanging again(still ok outside sandbox) and all the updates to the files have disappeared (I think outlook was still getting info from box even when run outside)

I'll recreate a profile to get it to work again, but I thought outlook was supposed to write thru the box to the original pst files. pst files can get pretty big and that will slow down loading (to copy the file to the sandbox and out again when closing)

created a new profile and it "worked" sort of (it kept hanging with outlook not responding) and after fiddling with some settings it started hanging again on loading (it looks the same as if you tried to start a second instance of outlook. and telling outlook to replace strangely just personal file every time outlook exits from sandbox is getting real old real quick

created a new profile with just 1 email and no calendar (personal.pst) rebooted, ran once outside the box to initialize files, ran in box, hung on splash screen processing...

sb.ini

Code: Select all

[GlobalSettings]

Template=OfficeClickToRun
Template=OfficeLicensing
Template=ComodoInternetSecurity
Template=LogitechSetPoint
TemplateReject=MBAE
TemplateReject=Logitech_G15_Keyboard
FileRootPath=D:\Sandbox\%USER%\%SANDBOX%
ExperimentalProtection64Bit=y
ActivationPrompt=n
ForceDisableSeconds=999999

[UserSettings_0C600210]

SbieCtrl_UserName=grahm
SbieCtrl_NextUpdateCheck=1502848462
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_WindowCoords=2126,347,707,455
SbieCtrl_ActiveView=40022
SbieCtrl_HideWindowNotify=n
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=n
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_TerminateWarn=n
SbieCtrl_AutoApplySettings=n
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_RecoverTarget=E:\Docs & Sets\Grahm\My Documents\Cent\Sem-3\rach-212
SbieCtrl_RecoverTarget=D:\Users\Grahm\Downloads
SbieCtrl_RecoverTarget=E:\Docs & Sets\Grahm\My Documents\GamSav\AoW\Scenario
SbieCtrl_SaveRecoverTargets=y
SbieCtrl_BoxExpandedView=DefaultBox,FireFox,Outlook,test,TorBrowser

[Template_MBAE]

Tmpl.Title=Malwarebytes Anti-Exploit
Tmpl.Class=Security
Tmpl.Scan=s
Tmpl.ScanKey=\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Malwarebytes Anti-Exploit
Tmpl.ScanKey=\REGISTRY\MACHINE\SOFTWARE\Malwarebytes Anti-Exploit
OpenIpcPath=*\BaseNamedObjects*\NamedBuffer*Process*API*
OpenIpcPath=*\BaseNamedObjects*\MBAE_IPC_PROTECTION*
OpenIpcPath=*\BaseNamedObjects*\Mutex*Process*API*
OpenIpcPath=*\RPC Control*\*MBAE_IPC_PROTECTION*
OpenIpcPath=*\BaseNamedObjects*\AutoUnhookMap*
OpenIpcPath=*\BaseNamedObjects*\mchMixCache*
OpenIpcPath=*\BaseNamedObjects*\Ipc2Cnt*
OpenIpcPath=*\BaseNamedObjects*\mchLLEW*
OpenIpcPath=$:mbae-svc.exe
InjectDll=C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.dll
InjectDll64=C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.dll

[DefaultBox]

ConfigLevel=7
AutoRecover=y
Template=PandaCloudAntivirus
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=E:\Install\OpSrc
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
DropAdminRights=y
Enabled=y
AutoDelete=y
NeverDelete=n
ForceProcess=iexplore.exe
ForceProcess=plugin-container.exe
ForceProcess=firefox.exe
BoxNameTitle=y

[TorBrowser]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=PandaCloudAntivirus
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
BoxNameTitle=y

[FireFox]

Enabled=y
ConfigLevel=7
AutoRecover=y
Template=PandaCloudAntivirus
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=E:\Docs & Sets\Grahm
RecoverFolder=E:\Install\OpSrc
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
BoxNameTitle=y

[Outlook]

Enabled=y
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=PandaCloudAntivirus
Template=Office_Outlook
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
OpenFilePath=<Office_Outlook>,%userprofile%\outlook files
OpenFilePath=<Office_Outlook>,d:\users\%user%\outlook files
BoxNameTitle=-
OpenWinClass=<office_outlook>,mspim_wnd32
ForceProcess=outlook.exe
AutoDelete=y
NeverDelete=n
monitor dump

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume1
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume5
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
(Drive)     \Device\HarddiskVolume8
(Drive)     \Device\HarddiskVolume9
(Drive)     \Device\ImDisk0
Clsid       -------------------------------
Clsid       {2163EB1F-3FD9-4212-A41F-81D1F933597F} Connect Class
Clsid       {88D96A05-F192-11D4-A65F-0040963251E5} XML DOM Document 6.0
Clsid       {88D96A0C-F192-11D4-A65F-0040963251E5} SAX XML Reader 6.0
Clsid       {88D96A0F-F192-11D4-A65F-0040963251E5} MXXMLWriter 6.0
Clsid       {A6A2383F-AD50-4D52-8110-3508275E77F7} LyncAddin Class
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid       {EFEF7FDB-0CED-4FB6-B3BB-3C50D39F4120} ColleagueImportAddIn Class
Clsid       {F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3} FormRegionAddin Class
Clsid    O  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Image       *:\program files\microsoft office 15\root\office15\outlook.exe
Image       *:\program files\sec\sandboxie\sandboxiedcomlaunch.exe
Image       *:\program files\sec\sandboxie\sandboxierpcss.exe
Image       *:\program files\sec\sandboxie\start.exe
Image       c:\program files (x86)\utl\dexpot\hooxpot64.dll
Image       c:\program files\common files\microsoft shared\office15\1033\osfintl.dll
Image       c:\program files\common files\microsoft shared\office15\mso.dll
Image       c:\program files\common files\microsoft shared\office15\msptls.dll
Image       c:\program files\common files\microsoft shared\office15\riched20.dll
Image       c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppc.dll
Image       c:\program files\microsoft office 15\root\office15\1033\mapir.dll
Image       c:\program files\microsoft office 15\root\office15\1033\outllibr.dll
Image       c:\program files\microsoft office 15\root\office15\1033\ucaddinres.dll
Image       c:\program files\microsoft office 15\root\office15\1033\umoutlookstrings.dll
Image       c:\program files\microsoft office 15\root\office15\addins\colleagueimport.dll
Image       c:\program files\microsoft office 15\root\office15\addins\umoutlookaddin.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvstream64.dll
Image       c:\program files\microsoft office 15\root\office15\appvisvsubsystems64.dll
Image       c:\program files\microsoft office 15\root\office15\c2r64.dll
Image       c:\program files\microsoft office 15\root\office15\contab32.dll
Image       c:\program files\microsoft office 15\root\office15\emsmdb32.dll
Image       c:\program files\microsoft office 15\root\office15\exsec32.dll
Image       c:\program files\microsoft office 15\root\office15\facebookprovider.dll
Image       c:\program files\microsoft office 15\root\office15\intldate.dll
Image       c:\program files\microsoft office 15\root\office15\mfc100u.dll
Image       c:\program files\microsoft office 15\root\office15\mspst32.dll
Image       c:\program files\microsoft office 15\root\office15\msvcp100.dll
Image       c:\program files\microsoft office 15\root\office15\msvcr100.dll
Image       c:\program files\microsoft office 15\root\office15\oart.dll
Image       c:\program files\microsoft office 15\root\office15\olmapi32.dll
Image       c:\program files\microsoft office 15\root\office15\osf.dll
Image       c:\program files\microsoft office 15\root\office15\osfproxy.dll
Image       c:\program files\microsoft office 15\root\office15\osfshared.dll
Image       c:\program files\microsoft office 15\root\office15\osfui.dll
Image       c:\program files\microsoft office 15\root\office15\outlrpc.dll
Image       c:\program files\microsoft office 15\root\office15\sharepointprovider.dll
Image       c:\program files\microsoft office 15\root\office15\socialconnector.dll
Image       c:\program files\microsoft office 15\root\office15\tmpod.dll
Image       c:\program files\microsoft office 15\root\office15\ucaddin.dll
Image       c:\program files\microsoft office 15\root\office15\wwlib.dll
Image       c:\program files\sec\sandboxie\sbiedll.dll
Image       c:\windows\microsoft.net\framework64\v4.0.30319\mscoreei.dll
Image       c:\windows\system32\actxprxy.dll
Image       c:\windows\system32\advapi32.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
Image       c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
Image       c:\windows\system32\aticfx64.dll
Image       c:\windows\system32\atidxx64.dll
Image       c:\windows\system32\atiuxp64.dll
Image       c:\windows\system32\atl.dll
Image       c:\windows\system32\avrt.dll
Image       c:\windows\system32\bcrypt.dll
Image       c:\windows\system32\bcryptprimitives.dll
Image       c:\windows\system32\cfgmgr32.dll
Image       c:\windows\system32\clbcatq.dll
Image       c:\windows\system32\comdlg32.dll
Image       c:\windows\system32\credssp.dll
Image       c:\windows\system32\crypt32.dll
Image       c:\windows\system32\cryptbase.dll
Image       c:\windows\system32\cryptsp.dll
Image       c:\windows\system32\d2d1.dll
Image       c:\windows\system32\d3d10_1.dll
Image       c:\windows\system32\d3d10_1core.dll
Image       c:\windows\system32\d3d10warp.dll
Image       c:\windows\system32\d3d11.dll
Image       c:\windows\system32\davclnt.dll
Image       c:\windows\system32\davhlpr.dll
Image       c:\windows\system32\devobj.dll
Image       c:\windows\system32\dhcpcsvc.dll
Image       c:\windows\system32\dhcpcsvc6.dll
Image       c:\windows\system32\dnsapi.dll
Image       c:\windows\system32\dui70.dll
Image       c:\windows\system32\duser.dll
Image       c:\windows\system32\dwmapi.dll
Image       c:\windows\system32\dwrite.dll
Image       c:\windows\system32\dxgi.dll
Image       c:\windows\system32\explorerframe.dll
Image       c:\windows\system32\fwpuclnt.dll
Image       c:\windows\system32\gdi32.dll
Image       c:\windows\system32\iertutil.dll
Image       c:\windows\system32\imm32.dll
Image       c:\windows\system32\iphlpapi.dll
Image       c:\windows\system32\kernel32.dll
Image       c:\windows\system32\kernelbase.dll
Image       c:\windows\system32\lpk.dll
Image       c:\windows\system32\mapi32.dll
Image       c:\windows\system32\mlang.dll
Image       c:\windows\system32\msasn1.dll
Image       c:\windows\system32\mscoree.dll
Image       c:\windows\system32\msctf.dll
Image       c:\windows\system32\msctfp.dll
Image       c:\windows\system32\msi.dll
Image       c:\windows\system32\msimg32.dll
Image       c:\windows\system32\mssprxy.dll
Image       c:\windows\system32\msvcr100.dll
Image       c:\windows\system32\msvcrt.dll
Image       c:\windows\system32\mswsock.dll
Image       c:\windows\system32\msxml6.dll
Image       c:\windows\system32\napinsp.dll
Image       c:\windows\system32\ncrypt.dll
Image       c:\windows\system32\netapi32.dll
Image       c:\windows\system32\netprofm.dll
Image       c:\windows\system32\netutils.dll
Image       c:\windows\system32\nlaapi.dll
Image       c:\windows\system32\normaliz.dll
Image       c:\windows\system32\npmproxy.dll
Image       c:\windows\system32\nsi.dll
Image       c:\windows\system32\ntdll.dll
Image       c:\windows\system32\ntmarta.dll
Image       c:\windows\system32\ole32.dll
Image       c:\windows\system32\oleacc.dll
Image       c:\windows\system32\oleaut32.dll
Image       c:\windows\system32\pnrpnsp.dll
Image       c:\windows\system32\powrprof.dll
Image       c:\windows\system32\profapi.dll
Image       c:\windows\system32\propsys.dll
Image       c:\windows\system32\psapi.dll
Image       c:\windows\system32\pstorec.dll
Image       c:\windows\system32\rasadhlp.dll
Image       c:\windows\system32\rpcepmap.dll
Image       c:\windows\system32\rpcrt4.dll
Image       c:\windows\system32\rpcrtremote.dll
Image       c:\windows\system32\rpcss.dll
Image       c:\windows\system32\rsaenh.dll
Image       c:\windows\system32\schannel.dll
Image       c:\windows\system32\sechost.dll
Image       c:\windows\system32\secur32.dll
Image       c:\windows\system32\setupapi.dll
Image       c:\windows\system32\sfc.dll
Image       c:\windows\system32\sfc_os.dll
Image       c:\windows\system32\shell32.dll
Image       c:\windows\system32\shlwapi.dll
Image       c:\windows\system32\srvcli.dll
Image       c:\windows\system32\sspicli.dll
Image       c:\windows\system32\structuredquery.dll
Image       c:\windows\system32\sxs.dll
Image       c:\windows\system32\tquery.dll
Image       c:\windows\system32\uiautomationcore.dll
Image       c:\windows\system32\urlmon.dll
Image       c:\windows\system32\user32.dll
Image       c:\windows\system32\userenv.dll
Image       c:\windows\system32\usp10.dll
Image       c:\windows\system32\uxtheme.dll
Image       c:\windows\system32\version.dll
Image       c:\windows\system32\webio.dll
Image       c:\windows\system32\webservices.dll
Image       c:\windows\system32\windowscodecs.dll
Image       c:\windows\system32\winhttp.dll
Image       c:\windows\system32\wininet.dll
Image       c:\windows\system32\winnsi.dll
Image       c:\windows\system32\winrnr.dll
Image       c:\windows\system32\wintrust.dll
Image       c:\windows\system32\wkscli.dll
Image       c:\windows\system32\wldap32.dll
Image       c:\windows\system32\ws2_32.dll
Image       c:\windows\system32\wship6.dll
Image       c:\windows\system32\wshtcpip.dll
Image       c:\windows\system32\wsock32.dll
Image       c:\windows\system32\wtsapi32.dll
Image       c:\windows\system32\xmllite.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_14556b8e8b95d1fc\gdiplus.dll
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\OLEBDF0ABBBF00544E790AB8D2B98E1
Ipc         \RPC Control\plugplay
Ipc         \RPC Control\protected_storage
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\_outlook_keepalive_
Ipc         \Sessions\1\BaseNamedObjects\_outlook_mutex_
Ipc         \Sessions\1\BaseNamedObjects\{A1D62C73-3712-4bf7-A524-ACE967A8C7D7}
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}15.0
Ipc         \Sessions\1\BaseNamedObjects\01308C1B-69EF-4060-B8E0-FEB12C8E2EE1_1276
Ipc         \Sessions\1\BaseNamedObjects\4D4150494C6F676F6E0070B872C47FD7101B8BEA00AA0038C699_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\5CAC3FAB-87F0-4750-984D-D50144543427-VER15
Ipc         \Sessions\1\BaseNamedObjects\69545831-0931-4328-8676-335423887A861504953_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374323122FE54C8FC5E4F9C8A261AEA59AFA2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374323122FE54C8FC5E4F9C8A261AEA59AFA202_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374328CE560093C17D141BB466003F6AF11F2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374328CE560093C17D141BB466003F6AF11F202_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374328CE560093C17D141BB466003F6AF11F204_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\74657374328CE560093C17D141BB466003F6AF11F206_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::1276
Ipc         \Sessions\1\BaseNamedObjects\AppVVirtual-1276
Ipc         \Sessions\1\BaseNamedObjects\AppVVirtual-4928
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000031.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\d:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000002b.db
Ipc         \Sessions\1\BaseNamedObjects\d:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\DwmComposedEvent_1
Ipc         \Sessions\1\BaseNamedObjects\EF46F207-682E-44D0-B511-33F2BD9D52DB-VER15
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheLogonEvent-666e192d8943ff49a79d252b096c5dd5-test2
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwner-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com - test2.ost
Ipc         \Sessions\1\BaseNamedObjects\EMSMDBCacheOwnerMutex-d:/Users/*****/AppData/Local/Microsoft/Outlook/greybert-@hotmail.com - test2.ost
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041319750000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!041919800000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!044895830000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!2E7242600000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4154494F0000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4D4170490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!4E469F490000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8012DAE40000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8012E0320000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8012E0330000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953!8012E0340000001C3F7EDDB2_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000090
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000208
Ipc         \Sessions\1\BaseNamedObjects\MAPI-154953@044895830000001C3F7EDDB20000000000000380
Ipc         \Sessions\1\BaseNamedObjects\Office15.B1E641B5-F92B-4B82-83B7-10DC868435E8
Ipc         \Sessions\1\BaseNamedObjects\OnlineHybridFolderList
Ipc         \Sessions\1\BaseNamedObjects\OSF_HostAppPresenceMutexName{1A4CE094-7581-4030-B02B-E68CE976C81A}
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1276
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2192
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3320
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4928
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6920
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7908
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_*****
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\x64_10ACB_GETTING_DATA10_S-1-5-5-0-524639
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACB_S-1-5-5-0-524639
Ipc         \Sessions\1\BaseNamedObjects\x64_10FM_ACBBD_S-1-5-5-0-524639
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACB10_S-1-5-5-0-524639
Ipc         \Sessions\1\BaseNamedObjects\x64_10MU_ACBPIDS_S-1-5-5-0-524639
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex.REC=(EXCHPERF.8484fa313f7eddb2e33297e8)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-advapi32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-normaliz-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-ole32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-shlwapi-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-user32-l1-1-0.dll
Ipc      O  \KnownDlls\api-ms-win-downlevel-version-l1-1-0.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\IERTUTIL.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NORMALIZ.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\URLMON.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USERENV.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WININET.dll
Ipc      O  \KnownDlls\WINTRUST.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8AppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8APPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8SFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-f8aafb30-5a05-4d48-a3c7-3789869186d8vfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System
Ipc      O  \RPC Control\ClickToRun_Pipeline
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\umpo
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_CACHEMUTEX
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_NDB_ZOMBIE
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_WCEMPTY
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_WCIDXPACKED
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_WCINFO
Ipc      O  \Sessions\1\BaseNamedObjects\08E65D60012A000000007FD8_WCWRITE
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\Dwm-3C94-ApiPort-6E5D
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfActivated.Default1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_ProcessEvent_00_01_04FC_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_658012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_668012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_678012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_688012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_698012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6A8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockReaderSem_00_6B8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_658012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_668012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_678012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_688012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_698012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6A8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_RwLockWriterSem_00_6B8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_RwLockHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootMutex_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_BootPulsar_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8012DAE4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8012E033_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2A8012E034_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04131975_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04191980_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B04489583_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B2E724260_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4154494F_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4D417049_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B4E469F49_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8012DAE4_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8012E033_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_2B8012E034_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_4E444100_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_FastMutexEvent_00_5E8012E032_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_Pages_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_ProcessEvent_00_01_04FC_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedHeap_SharedMem_00_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OfficeSharedLocks_SharedPTBHeap_Pages_00_01_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=Event.REC=(CANCEL.ALL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemory.REC=(GLOBAL)_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\OLKCRPC.OBJ=SharedMemoryMutex_S-1-5-21-3719404718-450017549-3382381772-1001
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:No Notifs Event:0x00001E74
Ipc      O  \Sessions\1\BaseNamedObjects\WMS Notif Engine:Notify Semaphore:0x00001E74
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Ipc      O  \UxSmsApiPort
Pipe        -------------------------------
Pipe        \Device\00000085
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\HarddiskVolume8
Pipe        \Device\HarddiskVolume9
Pipe        \Device\ImDisk0
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \device\namedpipe\wkssvc
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP12
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
Pipe     O  \Device\NamedPipe
Pipe     O  \Device\NamedPipe\
Pipe     O  \device\namedpipe\msftewds
Pipe     O  \Device\NamedPipe\MsFteWds
Pipe     O  \device\namedpipe\MsFteWds
Pipe     O  \device\namedpipe\msftewds
Pipe     O  \Device\NetBT_Tcpip_{4F5E8353-19C4-427A-A1E3-E4632E25EB27}
Pipe     O  \Device\NetBT_Tcpip_{DE226F90-9A91-47E3-AF0A-653B7B027172}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  mspim_wnd32
WinCls   O  OleMainThreadWndClass
WinCls   O  Shell_TrayWnd
WinCls   O  WMS ST Notif Class
WinCls   X  AgentAnim
WinCls   X  MSOBALLOON
WinCls   X  MsoHelp10
the only active addon I have is microsoft exchange addin
users\%user%\outlook files is one of the default locations for outlook files ie outlook install put them there

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: outlook 2013 something went wrong [SOLVED]

Post by Barb@Invincea » Thu Aug 10, 2017 5:25 pm

Hello grahm,
I didn't have auto delete set on outlook sandbox and accidentally deleted the contents (outlook&personal.pst)
You may want to give direct access to your outlook pst, otherwise it will take a long time for it to be recreated.

Create a new Sandbox and add Outlook to Sandbox Settings ---> Applications ---> Email Reader
Go to Appearance and check the Don't show Sandboxie indicator in the window title (to avoid freezing reminders).

Follow these steps to give access to your pst files' location:
https://www.sandboxie.com/index.php?App ... gs#folders

Then, use this tutorial (provided outlook launches this time), to test it: (Make sure Outlook works outside Sandboxie with the current profile prior to launching it sandboxed)
https://www.sandboxie.com/index.php?Tes ... figuration

If Outlook is still not launching, try disabling/remove any security software that might be installed on your computer (for testing purposes).

Regards,
Barb.-

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest