HitmanPro.Alert"

[jaro]

Nazwa dziennika:Application
Źródło:        HitmanPro.Alert
Data:          16.07.2016 22:39:26
Identyfikator zdarzenia:911
Kategoria zadania:(9)
Poziom:        Błędy
Słowa kluczowe:Klasyczny
Użytkownik:    Nie dotyczy
Komputer:      idea-PCZ-580
Opis:
Mitigation   Lockdown

Platform     10.0.10586/x64 06_3a
PID          3840
Application  C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe

Filename     C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe
Created By   C:\Program Files\WinRAR\WinRAR.exe

Process Trace
1  C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe [3840]
2  C:\Program Files\WinRAR\WinRAR.exe [11056]
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\j\AppData\Local\Temp\Update-ee281bac-bcd4-4549-8ed8-2900a53bb6f1\EnpassPackage-5.2.1.zip"
3  C:\Program Files (x86)\Enpass\Enpass.exe [7608]
"C:\Program Files (x86)\Enpass\Enpass.exe" startWithTray
4  C:\Windows\explorer.exe [6192]
5  C:\Windows\System32\userinit.exe [2284]
6  C:\Windows\System32\winlogon.exe [5276]
winlogon.exe
7  C:\Windows\System32\smss.exe [3160]
\SystemRoot\System32\smss.exe 000000ec 00000074 

Kod XML zdarzenia:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="HitmanPro.Alert" />
    <EventID Qualifiers="0">911</EventID>
    <Level>2</Level>
    <Task>9</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-07-16T20:39:26.725800700Z" />
    <EventRecordID>29146</EventRecordID>
    <Channel>Application</Channel>
    <Computer>idea-PCZ-580</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe</Data>
    <Data>Lockdown</Data>
    <Data>Mitigation   Lockdown

Platform     10.0.10586/x64 06_3a
PID          3840
Application  C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe

Filename     C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe
Created By   C:\Program Files\WinRAR\WinRAR.exe

Process Trace
1  C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe [3840]
2  C:\Program Files\WinRAR\WinRAR.exe [11056]
"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\j\AppData\Local\Temp\Update-ee281bac-bcd4-4549-8ed8-2900a53bb6f1\EnpassPackage-5.2.1.zip"
3  C:\Program Files (x86)\Enpass\Enpass.exe [7608]
"C:\Program Files (x86)\Enpass\Enpass.exe" startWithTray
4  C:\Windows\explorer.exe [6192]
5  C:\Windows\System32\userinit.exe [2284]
6  C:\Windows\System32\winlogon.exe [5276]
winlogon.exe
7  C:\Windows\System32\smss.exe [3160]
\SystemRoot\System32\smss.exe 000000ec 00000074 
</Data>
  </EventData>
</Event>