d mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD

DUMP-----INFO MFT record name --- watermark.bmp INFO MFT record parent dir --- 62618 INFO MFT record file size --- 104072 INFO MFT record first cluster --- 6882048 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: watermark.bmp INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 62977 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- WindowsBase.dll INFO MFT record parent dir --- 62707 INFO MFT record file size --- 1303896 INFO MFT record first cluster --- 10937695 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: WindowsBase.dll INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 62978 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- WindowsFormsIntegration.dll INFO MFT record parent dir --- 62707 INFO MFT record file size --- 87408 INFO MFT record first cluster --- 10241137 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: WindowsFormsIntegration.dll INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 62979 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- WMINet_Utils.dll INFO MFT record parent dir --- 62584

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

MFT record file size --- 31576 MFT record first cluster --- 2608454 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: WMINet_Utils.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62980 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- WPFFontCache_v0400.exe.mui MFT record parent dir --- 62851 MFT record file size --- 9576 MFT record first cluster --- 5031 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: WPFFontCache_v0400.exe.mui Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62981 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- WPFFontCache_v0400.exe MFT record parent dir --- 62707 MFT record file size --- 753504 MFT record first cluster --- 61828 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: WPFFontCache_v0400.exe Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62982 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- wpfgfx_v0400.dll MFT record parent dir --- 62707 MFT record file size --- 1663320 MFT record first cluster --- 10012870 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: wpfgfx_v0400.dll Constructing node entry for MFT entry

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62983 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- wpftxt_v0400.dll MFT record parent dir --- 62707 MFT record file size --- 915800 MFT record first cluster --- 6368700 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: wpftxt_v0400.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62984 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- XPThemes.manifest MFT record parent dir --- 62584 MFT record file size --- 474 MFT record first cluster --- 0 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: XPThemes.manifest Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62985 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- System.Windows.Forms.DataVisualization.dll MFT record parent dir --- 62584 MFT record file size --- 1711496 MFT record first cluster --- 13763381 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: System.Windows.Forms.DataVisualization.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62986

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO ERROR ERROR INFO

Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- bf8465.msi MFT record parent dir --- 1830 MFT record file size --- 1160192 MFT record first cluster --- 1284634 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: bf8465.msi Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62988 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- accessibility.gif MFT record parent dir --- 63008 MFT record file size --- 1027 MFT record first cluster --- 6971178 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: accessibility.gif Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62990 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- urchin.js MFT record parent dir --- 63008 MFT record file size --- 22678 MFT record first cluster --- 11655955 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: urchin.js Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62992 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- D3E19d01 MFT record parent dir --- 37862 MFT record file size --- 5930 MFT record first cluster --- 3465858 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: D3E19d01 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62994 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- sem_becca0477d4f35cf79fddeaa619204ae.js MFT record parent dir --- 63008 MFT record file size --- 19526 MFT record first cluster --- 9137429 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: sem_becca0477d4f35cf79fddeaa619204ae.js Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 62996 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- special_term_plan.pdf MFT record parent dir --- 116651 MFT record file size --- 538979 MFT record first cluster --- 1612516 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: special_term_plan.pdf Constructing node entry for MFT entry

INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! read MFT record 116651 - l Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups Constructing the object - l Object was successfully constructed - l file name: term plan - l Constructing node entry for MFT entry - l Node entry for MFT entry was successfully constructed - l Start of getting file parametres(size, time, date) - l End of getting file parametres(size, time, date) - l Getting parent dir entry num - l End of getting parent dir for entry num - l !!!---End the parsing loop---!!! --> read MFT record 62998 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- diffence betwn judicial review n activism.htm MFT record parent dir --- 28108 MFT record file size --- 167223 MFT record first cluster --- 468644 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: diffence betwn judicial review n activism.htm Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63000 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- adfetch.htm MFT record parent dir --- 63008 MFT record file size --- 5377 MFT record first cluster --- 14097874 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: adfetch.htm

INFO INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO ERROR ERROR INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63002 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- kotakpreferredtermplan.pdf MFT record parent dir --- 116651 MFT record file size --- 1154327 MFT record first cluster --- 1142104 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: kotakpreferredtermplan.pdf Constructing node entry for MFT entry Starting of putting deleted data for MFT entry Deleted data for MFT entry was generated Start of estimating damage level EstimateDamageLevel - trying to extract run list EstimateDamageLevel - run list was successfully extracted Damage level was successfully estimated Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63004 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- DDE06d01 MFT record parent dir --- 62401 MFT record file size --- 4489 MFT record first cluster --- 9533666 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: DDE06d01 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63006 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- D3D67d01

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

MFT record parent dir --- 20492 MFT record file size --- 5968 MFT record first cluster --- 3517146 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: D3D67d01 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63010 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- he.dll MFT record parent dir --- 61301 MFT record file size --- 290872 MFT record first cluster --- 3514724 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: he.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63012 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- hi.dll MFT record parent dir --- 61301 MFT record file size --- 389176 MFT record first cluster --- 9846038 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: hi.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63014 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- 53 MFT record parent dir --- 17732 MFT record file size --- 0 MFT record first cluster --- 0 MFT record is directory --- 1 ------END OF MFT RECORD DUMP-----file name: 53

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63016 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- hr.dll MFT record parent dir --- 61301 MFT record file size --- 329272 MFT record first cluster --- 6340894 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: hr.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63017 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- hu.dll MFT record parent dir --- 61301 MFT record file size --- 349752 MFT record first cluster --- 4382302 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: hu.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63018 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- clrjit_dll_x86 MFT record parent dir --- 45702 MFT record file size --- 385864 MFT record first cluster --- 10995673 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: clrjit_dll_x86 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!!

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

--> read MFT record 63019 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- icudt.dll MFT record parent dir --- 33943 MFT record file size --- 9848888 MFT record first cluster --- 550137 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: icudt.dll Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63020 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- mscordacwks_dll_x86 MFT record parent dir --- 45702 MFT record file size --- 1141592 MFT record first cluster --- 12119669 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: mscordacwks_dll_x86 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63021 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- mscordbi_dll_x86 MFT record parent dir --- 45702 MFT record file size --- 955728 MFT record first cluster --- 6324921 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: mscordbi_dll_x86 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63022 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- GOOGLECRASHHANDLER.EXE-0571C1B6.pf

INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO INFO

MFT record parent dir --- 110833 MFT record file size --- 21536 MFT record first cluster --- 7746396 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: GOOGLECRASHHANDLER.EXE-0571C1B6.pf Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63023 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- {FCFCA2F2-C99B-4832-8706-E7B6D9409415} MFT record parent dir --- 3960 MFT record file size --- 6948 MFT record first cluster --- 7780 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: {FCFCA2F2-C99B-4832-8706-E7B6D9409415} Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63024 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- mscorlib_dll_x86 MFT record parent dir --- 45702 MFT record file size --- 5196112 MFT record first cluster --- 4362084 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: mscorlib_dll_x86 Constructing node entry for MFT entry Node entry for MFT entry was successfully constructed Start of getting file parametres(size, time, date) End of getting file parametres(size, time, date) !!!---Entering the parsing loop---!!! !!!---End the parsing loop---!!! --> read MFT record 63025 Mft read mode is FAST Try to apply Sector Fixups End of apply Sector Fixups ------MFT RECORD DUMP-----MFT record name --- nlssorting_dll_x86 MFT record parent dir --- 45702 MFT record file size --- 56656 MFT record first cluster --- 1746793 MFT record is directory --- 0 ------END OF MFT RECORD DUMP-----file name: nlssorting_dll_x86

INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63026 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- Package_for_KB2345886~31bf3856ad364e35~x86~~6.0.1. 1.cat INFO MFT record parent dir --- 65552 INFO MFT record file size --- 7716 INFO MFT record first cluster --- 13840218 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: Package_for_KB2345886~31bf3856ad364e35~x86~~6.0.1.1.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63027 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- 6bf94c7f60b8316a23619e6f5f5abe5517a05d344fb2bc7aa8 618ba021a19c9a.cat INFO MFT record parent dir --- 66576 INFO MFT record file size --- 16206 INFO MFT record first cluster --- 13840214 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: 6bf94c7f60b8316a23619e6f5f5abe5517a05d344fb2bc7aa8618ba021a 19c9a.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63028 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_13e749c4a42377c59d97618ab0adf108_31bf3856ad364 e35_6.0.6001.22756_none_d22bf053167a0023.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 1048 INFO MFT record first cluster --- 10774346 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_13e749c4a42377c59d97618ab0adf108_31bf3856ad364e35_6.0.6 001.22756_none_d22bf053167a0023.manifest INFO Constructing node entry for MFT entry

INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63029 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_c58fc1013a45167da83923b6613371fe_31bf3856ad364 e35_6.0.6001.18524_none_dd97569aba71a89c.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 13840222 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_c58fc1013a45167da83923b6613371fe_31bf3856ad364e35_6.0.6 001.18524_none_dd97569aba71a89c.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63030 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_f18abd61d863e365201860e09b4ed623_31bf3856ad364 e35_6.0.6001.22756_none_f68ee18af6d3422c.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 12175552 INFO MFT record is directory --- 0

INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_f18abd61d863e365201860e09b4ed623_31bf3856ad364e35_6.0.6 001.22756_none_f68ee18af6d3422c.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63031 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_f8bc8550d2d9d8ad60b96d6c6d3727b3_31bf3856ad364 e35_6.0.6001.18524_none_8e8cfab31cfeaa9b.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 12175553 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_f8bc8550d2d9d8ad60b96d6c6d3727b3_31bf3856ad364e35_6.0.6 001.18524_none_8e8cfab31cfeaa9b.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63032 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_549a1c231d25192ac13351541d2b38d4_31bf3856ad364 e35_6.0.6001.18524_none_8f48403112f7e800.manifest

INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 12175554 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_549a1c231d25192ac13351541d2b38d4_31bf3856ad364e35_6.0.6 001.18524_none_8f48403112f7e800.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63033 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_a24f70f7fac6ee0c97d3d9f2548cdffc_31bf3856ad364 e35_6.0.6001.22756_none_c699a0948241c8e3.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 697 INFO MFT record first cluster --- 13840223 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_a24f70f7fac6ee0c97d3d9f2548cdffc_31bf3856ad364e35_6.0.6 001.22756_none_c699a0948241c8e3.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63034 INFO Mft read mode is FAST INFO Try to apply Sector Fixups

INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_8b7d0ce455a8e788ba8e23e359214e2a_31bf3856ad364 e35_6.0.6001.18524_none_bbed85c37776a43a.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 697 INFO MFT record first cluster --- 13840224 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_8b7d0ce455a8e788ba8e23e359214e2a_31bf3856ad364e35_6.0.6 001.18524_none_bbed85c37776a43a.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63035 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- ca6e5343de0cb66bf983e8669e7106c8ceb2296d4505b7a65c 3b45aaf640b21e.cat INFO MFT record parent dir --- 66576 INFO MFT record file size --- 9472 INFO MFT record first cluster --- 13840498 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: ca6e5343de0cb66bf983e8669e7106c8ceb2296d4505b7a65c3b45aaf64 0b21e.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63036 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_1fdcdb9023749018831dc3157c33a80f_31bf3856ad364 e35_6.0.6001.22756_none_fb022c434cac2fce.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 13840225 INFO MFT record is directory --- 0

INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_1fdcdb9023749018831dc3157c33a80f_31bf3856ad364e35_6.0.6 001.22756_none_fb022c434cac2fce.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63037 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_fd72086cf1f014c6996fdf20befd366a_31bf3856ad364 e35_6.0.6001.18524_none_b4ed6d2b2c215fae.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 13840507 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_fd72086cf1f014c6996fdf20befd366a_31bf3856ad364e35_6.0.6 001.18524_none_b4ed6d2b2c215fae.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63038 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- 9dd32bf82989aa33ab9d464b36019f2828b1a60c1ec6b5d1ec 8def93c9723f99.cat

INFO MFT record parent dir --- 66576 INFO MFT record file size --- 9472 INFO MFT record first cluster --- 13840508 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: 9dd32bf82989aa33ab9d464b36019f2828b1a60c1ec6b5d1ec8def93c97 23f99.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63039 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_cd271e1dcbe84fad0052d3ae6bd66671_31bf3856ad364 e35_6.0.6001.22756_none_a325af1c5b3c582c.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 696 INFO MFT record first cluster --- 13840511 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_cd271e1dcbe84fad0052d3ae6bd66671_31bf3856ad364e35_6.0.6 001.22756_none_a325af1c5b3c582c.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63040 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_74aab9cd8f4e9c003ae834010b65416b_31bf3856ad364 e35_6.0.6001.18524_none_ab1966009a011233.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 696 INFO MFT record first cluster --- 13840512 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_74aab9cd8f4e9c003ae834010b65416b_31bf3856ad364e35_6.0.6 001.18524_none_ab1966009a011233.manifest INFO Constructing node entry for MFT entry

INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63041 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- 916ec16067609bbbc53c7fedcd62bd546ed7e83cba23172890 0c230b5dad4f61.cat INFO MFT record parent dir --- 66576 INFO MFT record file size --- 16496 INFO MFT record first cluster --- 9847764 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: 916ec16067609bbbc53c7fedcd62bd546ed7e83cba231728900c230b5da d4f61.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63042 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_9d0761a95689746b93d3f8fd03d09d82_31bf3856ad364 e35_6.0.6002.22481_none_65d2577a5a42cba7.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 9847769 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_9d0761a95689746b93d3f8fd03d09d82_31bf3856ad364e35_6.0.6 002.22481_none_65d2577a5a42cba7.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups

INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63043 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_dd87926edf346786040871600fbe62dd_31bf3856ad364 e35_6.0.6002.18306_none_f1e42b8ca4fb1fab.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 9847927 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_dd87926edf346786040871600fbe62dd_31bf3856ad364e35_6.0.6 002.18306_none_f1e42b8ca4fb1fab.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63044 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_99fab299512f8d747be589008f4fc2ef_31bf3856ad364 e35_6.0.6002.22481_none_acab1016d883bc86.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 9847933 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_99fab299512f8d747be589008f4fc2ef_31bf3856ad364e35_6.0.6 002.22481_none_acab1016d883bc86.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!!

INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63045 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_3aa3c3746b00a55af62255214a98677c_31bf3856ad364 e35_6.0.6002.18306_none_69e3f90f935f83fc.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 700 INFO MFT record first cluster --- 9847939 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_3aa3c3746b00a55af62255214a98677c_31bf3856ad364e35_6.0.6 002.18306_none_69e3f90f935f83fc.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63046 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_67d9cc5abcca32f1c00b144086292f4c_31bf3856ad364 e35_6.0.6002.22481_none_345d4e9ee6bb2ae1.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 9847945 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_67d9cc5abcca32f1c00b144086292f4c_31bf3856ad364e35_6.0.6 002.22481_none_345d4e9ee6bb2ae1.manifest INFO Constructing node entry for MFT entry

INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63047 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_c7af3eabb4259bbe645d15bf431af954_31bf3856ad364 e35_6.0.6002.18306_none_0c0788b32ee90bea.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 9847951 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_c7af3eabb4259bbe645d15bf431af954_31bf3856ad364e35_6.0.6 002.18306_none_0c0788b32ee90bea.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63048 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_6fa2e95d20d8b297829b96eee351f6a7_31bf3856ad364 e35_6.0.6002.22481_none_de9e43f5c64e3c06.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 697 INFO MFT record first cluster --- 9847957 INFO MFT record is directory --- 0

INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_6fa2e95d20d8b297829b96eee351f6a7_31bf3856ad364e35_6.0.6 002.22481_none_de9e43f5c64e3c06.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63049 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_a9bc94325c2bfe9cf0f863c6fdf5b56e_31bf3856ad364 e35_6.0.6002.18306_none_1a3255d02053b2b8.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 697 INFO MFT record first cluster --- 9847963 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_a9bc94325c2bfe9cf0f863c6fdf5b56e_31bf3856ad364e35_6.0.6 002.18306_none_1a3255d02053b2b8.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63050 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- 57d49886b7f1dfc6a0d1bf3a54c609cc790fa5d162020f148a 48e4406acf5fde.cat

INFO MFT record parent dir --- 66576 INFO MFT record file size --- 9472 INFO MFT record first cluster --- 9847964 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: 57d49886b7f1dfc6a0d1bf3a54c609cc790fa5d162020f148a48e4406ac f5fde.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63051 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_16d83ea97f3557ee6f94714e850a7c66_31bf3856ad364 e35_6.0.6002.22481_none_eb058926032dbf82.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 9847967 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_16d83ea97f3557ee6f94714e850a7c66_31bf3856ad364e35_6.0.6 002.22481_none_eb058926032dbf82.manifest INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63052 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- x86_5a685ff05de92e7a8642cc004ed3fc37_31bf3856ad364 e35_6.0.6002.18306_none_1099f97a844887b7.manifest INFO MFT record parent dir --- 66580 INFO MFT record file size --- 704 INFO MFT record first cluster --- 9847974 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: x86_5a685ff05de92e7a8642cc004ed3fc37_31bf3856ad364e35_6.0.6 002.18306_none_1099f97a844887b7.manifest INFO Constructing node entry for MFT entry

INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres(size, time, date) INFO !!!---Entering the parsing loop---!!! INFO read MFT record 66580 - l INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO Constructing the object - l INFO Object was successfully constructed - l INFO _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! ASSERT A.F. Exp [(pattr->name_offset && pattr->name_offset >= 0x40)] File [D: \SVN_Source\fslib\ntfsparser.cpp] Line [397] ERROR $ATTRIBUTE_LIST fail! pattr->name_offset = 24 INFO Passing the attribute assert - l INFO Attribute assert was successfully passed - l INFO !!!---End the parsing loop---!!! INFO --> read MFT record 63053 INFO Mft read mode is FAST INFO Try to apply Sector Fixups INFO End of apply Sector Fixups INFO ------MFT RECORD DUMP-----INFO MFT record name --- 3092dc3eb1ea48be6e53c7a108b1493a495e7914e7b3bd5fbc a3be0f6d34ef16.cat INFO MFT record parent dir --- 66576 INFO MFT record file size --- 9472 INFO MFT record first cluster --- 9847975 INFO MFT record is directory --- 0 INFO ------END OF MFT RECORD DUMP-----INFO file name: 3092dc3eb1ea48be6e53c7a108b1493a495e7914e7b3bd5fbca3be0f6d3 4ef16.cat INFO Constructing node entry for MFT entry INFO Node entry for MFT entry was successfully constructed INFO Start of getting file parametres(size, time, date) INFO End of getting file parametres