Technical Information
- %APPDATA%\GradeCam Corporation\gcstart.bmp
- <SYSTEM32>\DRVSTORE\elmovhq_5B9E1C65075E2D75BED768A8E6BC12297B3AF32E\x86\ElmoVHQ.sys
- %TEMP%\Cab26.tmp
- %TEMP%\Cab28.tmp
- %WINDIR%\inf\oem7.inf
- %WINDIR%\inf\oem7.PNF
- %TEMP%\Cab2A.tmp
- %TEMP%\Cab2C.tmp
- <SYSTEM32>\DRVSTORE\elmovhq_5B9E1C65075E2D75BED768A8E6BC12297B3AF32E\elmovhq.inf
- <SYSTEM32>\DRVSTORE\elmovhq_5B9E1C65075E2D75BED768A8E6BC12297B3AF32E\ElmoVHQ.cat
- <SYSTEM32>\DRVSTORE\elmovhs_D46B596D6CB091D45673350182C93090E0E408B2\elmovhs.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT
- %WINDIR%\inf\oem8.inf
- %WINDIR%\inf\oem8.PNF
- <SYSTEM32>\DRVSTORE\elmovht_BDDB715329AAEAC6403C76FD4CC90EC0507161F6\elmovht.inf
- <SYSTEM32>\DRVSTORE\elmovht_BDDB715329AAEAC6403C76FD4CC90EC0507161F6\ElmoVHT.cat
- <SYSTEM32>\DRVSTORE\elmovht_BDDB715329AAEAC6403C76FD4CC90EC0507161F6\x86\ElmoVHT.sys
- %TEMP%\Cab32.tmp
- <SYSTEM32>\DRVSTORE\elmovhs_D46B596D6CB091D45673350182C93090E0E408B2\ElmoVHS.cat
- <SYSTEM32>\DRVSTORE\elmovhs_D46B596D6CB091D45673350182C93090E0E408B2\x86\ElmoVHS.sys
- %TEMP%\Cab22.tmp
- %TEMP%\Cab20.tmp
- %WINDIR%\inf\oem6.PNF
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
- %WINDIR%\inf\oem4.inf
- %WINDIR%\inf\oem4.PNF
- <SYSTEM32>\DRVSTORE\elmovhm_8A078A26635822E3BB2A00EB62062CE47EF783DA\elmovhm.inf
- <SYSTEM32>\DRVSTORE\elmovhm_8A078A26635822E3BB2A00EB62062CE47EF783DA\ElmoVHM.cat
- <SYSTEM32>\DRVSTORE\elmovhm_8A078A26635822E3BB2A00EB62062CE47EF783DA\x86\ElmoVHM.sys
- %TEMP%\Cab12.tmp
- %TEMP%\Cab14.tmp
- <SYSTEM32>\DRVSTORE\elmosesame_08061D52E2386CF6912D443D1A185D809B746475\x86\ElmoSESAME.sys
- %WINDIR%\inf\oem5.inf
- %TEMP%\Cab16.tmp
- %TEMP%\Cab18.tmp
- <SYSTEM32>\DRVSTORE\elmovhp_265BB647B9FE65E53B6864058B8E8C81CC769A42\elmovhp.inf
- <SYSTEM32>\DRVSTORE\elmovhp_265BB647B9FE65E53B6864058B8E8C81CC769A42\ElmoVHP.cat
- <SYSTEM32>\DRVSTORE\elmovhp_265BB647B9FE65E53B6864058B8E8C81CC769A42\x86\ElmoVHP.sys
- %TEMP%\Cab1C.tmp
- %TEMP%\Cab1E.tmp
- %WINDIR%\inf\oem6.inf
- %WINDIR%\inf\oem5.PNF
- %TEMP%\Cab34.tmp
- %WINDIR%\inf\oem9.PNF
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\OBJECTS.MAP
- %TEMP%\Cab36.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_.DEFAULT
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SECURITY
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SOFTWARE
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SYSTEM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SAM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\ComDb.Dat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\domain.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\INDEX.BTR
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\INDEX.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING.VER
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING1.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING2.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\OBJECTS.DATA
- %WINDIR%\Installer\MSI3D.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\$WinMgmt.CFG
- %WINDIR%\Installer\26cb0.ipi
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\lumensav.inf
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\LumensAV.cat
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensStillCap.dll
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensCustomPage.dll
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\MSVCR71.dll
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensBmp2Jpg.dll
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensExtend.dll
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensTwain.ds
- %TEMP%\Cab38.tmp
- <SYSTEM32>\DRVSTORE\lumensav_CEFAE0953AE60A99016ACFDBD4A5C174EE385A0A\x86\LumensAV.sys
- %WINDIR%\inf\oem10.inf
- %WINDIR%\inf\oem10.PNF
- %WINDIR%\Installer\26cae.msi
- %APPDATA%\GradeCam Corporation\msi\npGCPlugin2_2.0.2.4_allusers.msi
- %APPDATA%\GradeCam Corporation\npGCPlugin2_2.0.2.4_allusers.msi.log
- %TEMP%\3aaf7.msi
- %WINDIR%\Installer\26caf.msi
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT
- <SYSTEM32>\DRVSTORE\elmosesame_08061D52E2386CF6912D443D1A185D809B746475\ElmoSESAME.cat
- %WINDIR%\inf\oem9.inf
- <SYSTEM32>\DRVSTORE\elmosesame_08061D52E2386CF6912D443D1A185D809B746475\elmosesame.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoP1.inf
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
- %WINDIR%\Installer\MSI3.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
- %WINDIR%\Installer\26cab.ipi
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
- %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\DPInst.exe
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmovhp.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHP.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHQ.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoVHM.sys
- <SYSTEM32>\ImgMtDevCtrl.dll
- %WINDIR%\Installer\MSI4.tmp
- C:\Config.Msi\26cac.rbs
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
- %TEMP%\nsk2.tmp\newadvsplash.dll
- %APPDATA%\GradeCam Corporation\msi\npGCPlugin_2.0.2.4_allusers.msi
- %APPDATA%\GradeCam Corporation\msi\npGCPlugin64_2.0.2.4_allusers.msi
- %APPDATA%\GradeCam Corporation\msi\ElmoSupportInstaller.msi
- %APPDATA%\GradeCam Corporation\elmo_msi.log
- %TEMP%\24627.msi
- %WINDIR%\Installer\26caa.msi
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
- %APPDATA%\GradeCam Corporation\gcdone.bmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmovht.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmop1.cat
- %TEMP%\CabA.tmp
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHM.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHS.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmovhs.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHS.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoVHQ.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\LumensAV.inf
- %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a.manifest
- %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensStillCap.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHQ.sys
- %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
- %WINDIR%\DPINST.LOG
- <SYSTEM32>\DRVSTORE\elmop1_09AE1DF59D28C6D4AE0AFC1E0BEBD183036720DD\elmop1.inf
- <SYSTEM32>\DRVSTORE\elmop1_09AE1DF59D28C6D4AE0AFC1E0BEBD183036720DD\ElmoP1.cat
- <SYSTEM32>\DRVSTORE\elmop1_09AE1DF59D28C6D4AE0AFC1E0BEBD183036720DD\x86\ElmoP1.sys
- %TEMP%\Cab8.tmp
- %WINDIR%\inf\oem3.inf
- %WINDIR%\inf\oem3.PNF
- %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
- %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensExtend.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHM.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoP1.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensTwain.ds
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoVHT.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoSESAME.inf
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensCustomPage.dll
- <SYSTEM32>\ELVDLib.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmosesame.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmovhm.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\ElmoP1.sys
- <SYSTEM32>\EL_PresenterWin.ocx
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoVHS.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\elmovhq.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensAV.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoSESAME.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\LumensBmp2Jpg.dll
- %ProgramFiles%\GradeCamElmoSupport\drivers\lumensav.cat
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoVHP.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\ElmoVHT.sys
- %ProgramFiles%\GradeCamElmoSupport\drivers\x86\msvcr71.dll
- <SYSTEM32>\PrsenterV2_SDK.dll
- %TEMP%\CabC.tmp
- %WINDIR%\Installer\MSI3E.tmp
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT
- %WINDIR%\Installer\MSI3.tmp
- %WINDIR%\Installer\26caa.msi
- C:\Config.Msi\26cac.rbs
- C:\Config.Msi\26cad.rbf
- %WINDIR%\Installer\MSI4.tmp
- %TEMP%\Cab38.tmp
- %TEMP%\Cab36.tmp
- %TEMP%\Cab34.tmp
- %TEMP%\Cab32.tmp
- %TEMP%\Cab2C.tmp
- %TEMP%\Cab2A.tmp
- %TEMP%\Cab28.tmp
- %TEMP%\Cab26.tmp
- %TEMP%\Cab22.tmp
- %TEMP%\Cab20.tmp
- %TEMP%\Cab1E.tmp
- %TEMP%\Cab1C.tmp
- %TEMP%\Cab18.tmp
- %TEMP%\Cab16.tmp
- %TEMP%\Cab14.tmp
- %TEMP%\Cab12.tmp
- %TEMP%\CabC.tmp
- %TEMP%\CabA.tmp
- %TEMP%\Cab8.tmp
- %WINDIR%\Installer\26cab.ipi
- %TEMP%\24627.msi
- from %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375.cat to C:\Config.Msi\26cad.rbf
- 'wp#d':80
- 'download.windowsupdate.com':80
- http://11#.#11.111.1/wpad.dat via wp#d
- http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt via download.windowsupdate.com
- http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab via download.windowsupdate.com
- DNS ASK wp#d
- DNS ASK www.download.windowsupdate.com
- '%ProgramFiles%\GradeCamElmoSupport\drivers\DPInst.exe' /sw /lm /sa
- '<SYSTEM32>\msiexec.exe' /i ElmoSupportInstaller.msi /liare+ "%APPDATA%\GradeCam Corporation\elmo_msi.log"
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' -Embedding DC8671DE760E3396F4A4894ECE99B281
- '<SYSTEM32>\msiexec.exe' /i "npGCPlugin2_2.0.2.4_allusers.msi" /liare+ "%APPDATA%\GradeCam Corporation\npGCPlugin2_2.0.2.4_allusers.msi.log"