Interesting Command Center Commands
Interesting Command Center Commands
12/06/19 00:58:22 12/06/19 00:58:22 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/10/19 18:54:29 12/10/19 18:54:29 Dennis Okeefe 201 Screenshot
12/10/19 18:54:37 12/10/19 18:54:37 Dennis Okeefe 202 Screenshot
12/10/19 18:54:43 12/10/19 18:54:43 Dennis Okeefe 203 Screenshot
12/10/19 18:54:49 12/10/19 18:54:49 Dennis Okeefe 204 Screenshot
12/11/19 02:19:54 12/11/19 02:19:54 Dennis Okeefe 0 Refresh Data
12/11/19 02:39:51 12/11/19 02:39:51 Dennis Okeefe 201 Screenshot
12/11/19 02:40:05 12/11/19 02:40:05 Dennis Okeefe 201 Screenshot
12/11/19 02:40:28 12/11/19 02:40:28 Dennis Okeefe 201 Remote Control Machine (hidden)
12/11/19 02:40:54 12/11/19 02:40:54 Dennis Okeefe 1 Screenshot
12/11/19 02:41:03 12/11/19 02:41:03 Dennis Okeefe 1 Remote Control Machine (hidden)
12/11/19 02:41:26 12/11/19 02:41:26 Dennis Okeefe 2 Remote Control Machine (hidden)
12/11/19 02:41:40 12/11/19 02:41:40 Dennis Okeefe 3 Remote Control Machine (hidden)
12/11/19 02:41:46 12/11/19 02:41:46 Dennis Okeefe 3 Remote Control Machine (hidden)
12/11/19 02:41:52 12/11/19 02:41:52 Dennis Okeefe 4 Remote Control Machine (hidden)
12/11/19 02:47:14 12/11/19 02:47:14 Dennis Okeefe 201 Screenshot
12/11/19 02:47:25 12/11/19 02:47:25 Dennis Okeefe 201 Remote Control Machine (hidden)
12/11/19 02:48:15 12/11/19 02:48:15 Dennis Okeefe 202 Remote Control Machine (hidden)
12/11/19 02:48:35 12/11/19 02:48:35 Dennis Okeefe 1 Screenshot
12/11/19 02:49:14 12/11/19 02:49:14 Dennis Okeefe 204 Edit File C:\BOOTDRV\StartAK.bat
12/11/19 02:49:30 12/11/19 02:49:30 Dennis Okeefe 204 Send File C:\BOOTDRV\StartAK.bat
12/11/19 02:49:42 12/11/19 02:49:42 Dennis Okeefe 204 Reboot
12/11/19 02:49:47 12/11/19 02:49:47 Dennis Okeefe 201 Screenshot
12/11/19 02:49:53 12/11/19 02:49:53 Dennis Okeefe 1 Screenshot
12/11/19 02:50:01 12/11/19 02:50:01 Dennis Okeefe 2 Screenshot
12/11/19 02:50:06 12/11/19 02:50:06 Dennis Okeefe 3 Screenshot
12/11/19 02:50:14 12/11/19 02:50:14 Dennis Okeefe 0 Remote Control Machine (hidden)
12/11/19 03:30:45 12/11/19 03:30:45 Srdjan Vojic 0 Run Command netsh interface ip delete arpcache
12/11/19 03:30:53 12/11/19 03:30:53 Srdjan Vojic 3 Remote Control Machine (hidden)
12/11/19 03:36:22 12/11/19 03:36:22 Srdjan Vojic 3 Screenshot
12/11/19 03:36:39 12/11/19 03:36:39 Srdjan Vojic 3 Query Services
12/11/19 03:37:34 12/11/19 03:37:34 Srdjan Vojic 3 Query Services
12/11/19 03:38:57 12/11/19 03:38:57 Srdjan Vojic 3 Query Tasks
12/11/19 03:39:58 12/11/19 03:39:58 Dennis Okeefe 201 Screenshot
12/11/19 03:40:21 12/11/19 03:40:21 Dennis Okeefe 202 Screenshot
12/11/19 03:40:39 12/11/19 03:40:39 Srdjan Vojic 3 Kill Task 4248;pvnc
12/11/19 03:40:43 12/11/19 03:40:43 Srdjan Vojic 3 Remote Control Machine (hidden)
12/11/19 03:43:14 12/11/19 03:43:14 Dennis Okeefe 203 Screenshot
12/11/19 03:43:19 12/11/19 03:43:19 Dennis Okeefe 204 Screenshot
12/11/19 03:43:31 12/11/19 03:43:31 Dennis Okeefe 204 Edit File C:\BOOTDRV\StartAK.bat
12/11/19 03:44:04 12/11/19 03:44:04 Dennis Okeefe 204 Reboot
12/11/19 03:47:06 12/11/19 03:47:06 Dennis Okeefe 204 Screenshot
12/11/19 03:47:30 12/11/19 03:47:30 Dennis Okeefe 204 Edit File C:\BOOTDRV\StartAK.bat
12/11/19 03:47:51 12/11/19 03:47:51 Dennis Okeefe 204 Remote Control Machine (hidden)
12/11/19 03:58:55 12/11/19 03:58:55 Dennis Okeefe 204 Screenshot
12/11/19 03:59:11 12/11/19 03:59:11 Dennis Okeefe 204 Edit File C:\BOOTDRV\StartAK.bat
12/11/19 04:00:05 12/11/19 04:00:05 Dennis Okeefe 204 Edit File C:
\BOOTDRV\AlohaKitchen\Data\Loc
alSettings.84.xml
12/11/19 04:00:17 12/11/19 04:00:17 Dennis Okeefe 204 Edit File C:
\BOOTDRV\AlohaKitchen\Data\Loc
alSettings.9999.xml
12/11/19 04:00:52 12/11/19 04:00:52 Dennis Okeefe 204 View File C:
\BOOTDRV\AlohaKitchen\Tmp\Deb
out.20191211.AlohaKitchen.84.txt
12/14/19 10:02:10 12/14/19 10:02:10 Marko Bjelic 0 Remote Control Machine (hidden)
12/14/19 10:02:48 12/14/19 10:02:48 Marko Bjelic 0 CfcRemoteLogin (hidden)
12/14/19 10:02:50 12/14/19 10:02:50 Marko Bjelic 0 Remote Control Machine (hidden)
12/14/19 10:04:32 12/14/19 10:04:32 Marko Bjelic 1 Screenshot
12/14/19 10:04:35 12/14/19 10:04:35 Marko Bjelic 2 Screenshot
12/14/19 10:04:37 12/14/19 10:04:37 Marko Bjelic 1 Screenshot
12/14/19 10:04:40 12/14/19 10:04:40 Marko Bjelic 4 Screenshot
12/14/19 10:04:42 12/14/19 10:04:42 Marko Bjelic 5 Screenshot
12/14/19 10:05:27 12/14/19 10:05:27 Marko Bjelic 1 Screenshot
12/14/19 10:05:38 12/14/19 10:05:38 Marko Bjelic 1 Screenshot
12/14/19 10:05:42 12/14/19 10:05:42 Marko Bjelic 5 Screenshot
12/14/19 10:05:47 12/14/19 10:05:47 Marko Bjelic 0 Screenshot
12/14/19 10:05:54 12/14/19 10:05:54 Marko Bjelic 0 Screenshot
12/14/19 10:05:57 12/14/19 10:05:57 Marko Bjelic 1 Screenshot
12/14/19 10:06:00 12/14/19 10:06:00 Marko Bjelic 1 Remote Control Machine (hidden)
12/14/19 10:06:31 12/14/19 10:06:31 Marko Bjelic 0 View File D:
\BootDrv\CFC\Log\CFCInStoreServ
ice.20191214.log
12/14/19 10:07:07 12/14/19 10:07:07 Marko Bjelic 1 Screenshot
12/14/19 10:08:14 12/14/19 10:08:14 Marko Bjelic 1 Screenshot
12/15/19 23:23:48 12/15/19 23:23:48 Vladimir Pantelic 0 Screenshot
12/15/19 23:35:14 12/15/19 23:35:14 Vladimir Pantelic 0 Screenshot
12/15/19 23:43:22 12/15/19 23:43:22 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/15/19 23:45:18 12/15/19 23:45:18 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/16/19 01:06:58 12/16/19 01:06:58 Vladimir Pantelic 1 Remote Control Machine (hidden)
12/16/19 01:08:46 12/16/19 01:08:46 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/16/19 01:09:28 12/16/19 01:09:28 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/16/19 01:11:03 12/16/19 01:11:03 Vladimir Pantelic 0 Remote Control Machine (hidden)
12/30/19 13:16:33 12/30/19 13:16:33 Danilo Bojicic 0 Remote Control Machine (hidden)
12/30/19 13:24:36 12/30/19 13:24:36 Slavisa Mihajlovic 0 Run Command net user
12/30/19 13:25:43 12/30/19 13:25:43 Slavisa Mihajlovic 0 Run Command arp -a
12/30/19 13:26:02 12/30/19 13:26:02 Slavisa Mihajlovic 0 Run Command net user
12/30/19 13:32:58 12/30/19 13:32:58 Danilo Bojicic 0 Remote Control Machine (hidden)
12/30/19 23:18:11 12/30/19 23:18:11 Petar Mirkovic 0 Remote Control Machine (hidden)
12/31/19 01:47:59 12/31/19 01:47:59 Petar Mirkovic 0 Remote Control Machine (hidden)
12/31/19 02:48:01 12/31/19 02:48:01 Petar Mirkovic 0 Remote Control Machine (hidden)
12/31/19 02:53:06 12/31/19 02:53:06 Petar Mirkovic 0 Remote Control Machine (hidden)
12/31/19 02:54:31 12/31/19 02:54:31 Petar Mirkovic 0 Remote Control Machine (hidden)
12/31/19 11:06:24 12/31/19 11:06:24 Richard Parker 0 Remote Control Machine (hidden)
12/31/19 11:16:21 12/31/19 11:16:21 Richard Parker 205 Remote Control Machine (hidden)
12/31/19 11:16:56 12/31/19 11:16:56 Richard Parker 203 Remote Control Machine (hidden)
12/31/19 11:17:25 12/31/19 11:17:25 Richard Parker 202 Remote Control Machine (hidden)
12/31/19 11:17:58 12/31/19 11:17:58 Richard Parker 201 Remote Control Machine (hidden)
12/31/19 11:41:03 12/31/19 11:41:03 Richard Parker 5 Remote Control Machine (hidden)
12/31/19 11:41:30 12/31/19 11:41:30 Richard Parker 4 Remote Control Machine (hidden)
12/31/19 15:04:17 12/31/19 15:04:17 Bojan Stankovic 0 Remote Control Machine (hidden)
12/31/19 15:04:48 12/31/19 15:04:48 Bojan Stankovic 0 Query Tasks
12/31/19 15:06:03 12/31/19 15:06:03 Bojan Stankovic 0 Run Command taskkill /im pvnc.exe /f
12/31/19 15:06:28 12/31/19 15:06:28 Bojan Stankovic 0 Remote Control Machine (hidden)
12/31/19 15:11:33 12/31/19 15:11:33 Bojan Stankovic 0 Query Tasks
12/31/19 15:12:52 12/31/19 15:12:52 Bojan Stankovic 0 Remote Control Machine (hidden)
12/31/19 15:37:54 12/31/19 15:37:54 Bojan Stankovic 0 Remote Control Machine (hidden)
12/31/19 15:38:39 12/31/19 15:38:39 Bojan Stankovic 0 Remote Control Machine (hidden)
12/31/19 15:42:27 12/31/19 15:42:27 Bojan Stankovic 0 Remote Control Machine (hidden)
01/01/20 10:41:47 01/01/20 10:41:47 Aleksa Radojicic 0 Query Tasks
01/07/20 07:33:30 01/07/20 07:33:30 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 07:33:45 01/07/20 07:33:45 O’Day Baker 0 Query Services
01/07/20 07:33:51 01/07/20 07:33:51 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 07:34:01 01/07/20 07:34:01 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 07:34:28 01/07/20 07:34:28 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 07:36:24 01/07/20 07:36:24 O’Day Baker 0 Query Environment
01/07/20 08:41:55 01/07/20 08:41:55 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 08:42:17 01/07/20 08:42:17 O’Day Baker 0 Query Services
01/07/20 08:42:25 01/07/20 08:42:25 O’Day Baker 0 Restart Service pvnc
01/07/20 08:42:27 01/07/20 08:42:27 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 08:43:15 01/07/20 08:43:15 O’Day Baker 0 View File D:\BootDrv\AlohaQS\tmp\DEBOUT.
EDC
01/07/20 13:39:55 01/07/20 13:39:55 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 13:40:34 01/07/20 13:40:34 O’Day Baker 0 Query Services
01/07/20 13:40:38 01/07/20 13:40:38 O’Day Baker 0 Restart Service pvnc
01/07/20 13:40:39 01/07/20 13:40:39 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 14:36:22 01/07/20 14:36:22 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 14:37:10 01/07/20 14:37:10 O’Day Baker 0 Query Services
01/07/20 14:37:33 01/07/20 14:37:33 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 14:38:07 01/07/20 14:38:07 O’Day Baker 0 Query Services
01/07/20 14:38:10 01/07/20 14:38:10 O’Day Baker 0 Restart Service pvnc
01/07/20 14:38:12 01/07/20 14:38:12 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 14:39:15 01/07/20 14:39:15 O’Day Baker 0 Query Services
01/07/20 14:39:18 01/07/20 14:39:18 O’Day Baker 0 Restart Service pvnc
01/07/20 14:39:20 01/07/20 14:39:20 O’Day Baker 0 Remote Control Machine (hidden)
01/07/20 14:39:36 01/07/20 14:39:36 O’Day Baker 0 Query Tasks
01/07/20 14:39:55 01/07/20 14:39:55 O’Day Baker 0 Query Services
01/10/20 19:03:47 01/10/20 19:03:47 Ognjen Puljic 0 Run Command net stop sqlservr.exe
01/10/20 19:03:52 01/10/20 19:03:52 Ognjen Puljic 0 Query Services
01/10/20 19:03:59 01/10/20 19:03:59 Ognjen Puljic 0 Restart Service MSSQL$SQLEXPRESS
01/10/20 19:04:07 01/10/20 19:04:07 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 19:04:17 01/10/20 19:04:17 Dusan Oljaca 0 Query Tasks
01/10/20 19:05:52 01/10/20 19:05:52 Ognjen Puljic 3 Screenshot
01/10/20 19:07:23 01/10/20 19:07:23 Ognjen Puljic 2 Screenshot
01/10/20 19:07:32 01/10/20 19:07:32 Ognjen Puljic 0 Query Services
01/10/20 19:07:42 01/10/20 19:07:42 Ognjen Puljic 0 Query Tasks
01/10/20 19:07:53 01/10/20 19:07:53 Ognjen Puljic 0 Kill Task 3900;sqlservr
01/10/20 19:07:56 01/10/20 19:07:56 Ognjen Puljic 0 Query Services
01/10/20 19:08:02 01/10/20 19:08:02 Ognjen Puljic 0 Start Service MSSQL$SQLEXPRESS
01/10/20 19:09:35 01/10/20 19:09:35 Ognjen Puljic 0 Query Tasks
01/10/20 19:13:33 01/10/20 19:13:33 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 19:21:12 01/10/20 19:21:12 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 19:22:17 01/10/20 19:22:17 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 20:08:32 01/10/20 20:08:32 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 20:34:39 01/10/20 20:34:39 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:03:04 01/10/20 22:03:04 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:07:17 01/10/20 22:07:17 Dusan Oljaca 0 Screenshot
01/10/20 22:14:28 01/10/20 22:14:28 Dusan Oljaca 0 Screenshot
01/10/20 22:14:50 01/10/20 22:14:50 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:33:03 01/10/20 22:33:03 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:34:41 01/10/20 22:34:41 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:57:56 01/10/20 22:57:56 Dusan Oljaca 0 Remote Control Machine (hidden)
01/10/20 22:59:11 01/10/20 22:59:11 Dusan Oljaca 0 Reset Ext Auth Info dusan.oljaca@ncr.com
01/10/20 23:01:31 01/10/20 23:01:31 Dusan Oljaca 0 Query Services
01/13/20 04:48:56 01/13/20 04:48:56 Dejan Djuricic 1 Remote Control Machine (hidden)
01/13/20 04:50:01 01/13/20 04:50:01 Dejan Djuricic 2 Screenshot
01/13/20 04:50:06 01/13/20 04:50:06 Dejan Djuricic 3 Screenshot
01/13/20 04:50:12 01/13/20 04:50:12 Dejan Djuricic 4 Screenshot
01/13/20 04:50:18 01/13/20 04:50:18 Dejan Djuricic 4 Remote Control Machine (hidden)
01/13/20 04:52:28 01/13/20 04:52:28 Dejan Djuricic 0 Edit File D:\BootDrv\AlohaQS\Data\ALOHA.
INI
01/13/20 04:53:38 01/13/20 04:53:38 Dejan Djuricic 1 Screenshot
01/13/20 04:54:28 01/13/20 04:54:28 Dejan Djuricic 0 Send files/folders D:\BootDrv\AlohaQS\tmp\STOP
01/13/20 04:54:49 01/13/20 04:54:49 Dejan Djuricic 0 Delete File D:\BootDrv\AlohaQS\Data\EOD
01/13/20 04:54:59 01/13/20 04:54:59 Dejan Djuricic 0 Edit File D:\BootDrv\AlohaQS\Data\ALOHA.
INI
01/13/20 04:55:12 01/13/20 04:55:12 Dejan Djuricic 0 Send File D:\BootDrv\AlohaQS\Data\ALOHA.
INI
01/13/20 04:55:21 01/13/20 04:55:21 Dejan Djuricic 0 Edit File D:
\BootDrv\AlohaQS\NewData\ALOH
A.INI
01/13/20 04:55:40 01/13/20 04:55:40 Dejan Djuricic 0 Delete File D:\BootDrv\AlohaQS\tmp\STOP
01/13/20 04:56:57 01/13/20 04:56:57 Dejan Djuricic 2 Screenshot
01/13/20 04:57:04 01/13/20 04:57:04 Dejan Djuricic 4 Screenshot
01/13/20 04:57:58 01/13/20 04:57:58 Dejan Djuricic 1 Screenshot
01/13/20 04:58:22 01/13/20 04:58:22 Dejan Djuricic 1 Screenshot
01/13/20 04:58:55 01/13/20 04:58:55 Dejan Djuricic 1 Screenshot
01/13/20 04:58:58 01/13/20 04:58:58 Dejan Djuricic 2 Screenshot
01/13/20 04:59:02 01/13/20 04:59:02 Dejan Djuricic 3 Screenshot
01/13/20 04:59:10 01/13/20 04:59:10 Dejan Djuricic 4 Screenshot
01/13/20 04:59:46 01/13/20 04:59:46 Dejan Djuricic 1 Delete File C:\BootDrv\AlohaQS\\tmp\stop
01/13/20 05:00:01 01/13/20 05:00:01 Dejan Djuricic 2 Delete File C:\BootDrv\AlohaQS\\tmp\stop
01/14/20 23:33:29 01/14/20 23:33:29 Vladimir Pantelic 0 Remote Control Machine (hidden)
01/14/20 23:36:23 01/14/20 23:36:23 Vladimir Pantelic 0 Run Command wmic product "NCR
Aloha Takeout" get
name,InstallDate,Version
01/14/20 23:46:18 01/14/20 23:46:18 Vladimir Pantelic 0 Query Environment
01/14/20 23:47:42 01/14/20 23:47:42 Vladimir Pantelic 0 Move|Rename File D:\BootDrv\Aloha
Takeout\Data\AlohaToGoConfig.
xml|D:\BootDrv\Aloha
Takeout\Data\Copy of
AlohaToGoConfig.xml|False
01/14/20 23:48:37 01/14/20 23:48:37 Vladimir Pantelic 0 Move|Rename File D:\BootDrv\Aloha
Takeout\Data\Copy of
AlohaToGoConfig.xml|D:
\BootDrv\Aloha
Takeout\Data\AlohaToGoConfigOve
rride.xml
01/14/20 23:48:43 01/14/20 23:48:43 Vladimir Pantelic 0 Edit File D:\BootDrv\Aloha
Takeout\Data\AlohaToGoConfigOve
rride.xml
01/14/20 23:49:14 01/14/20 23:49:14 Vladimir Pantelic 0 Send File D:\BootDrv\Aloha
Takeout\Data\AlohaToGoConfigOve
rride.xml
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 1 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 3 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 2 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 5 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 4 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 201 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 202 Reboot
01/14/20 23:49:25 01/14/20 23:49:25 Vladimir Pantelic 203 Reboot
01/17/20 09:37:26 01/17/20 09:37:26 Tammy Hill 0 Remote Control Machine (hidden)
01/17/20 09:41:25 01/17/20 09:41:25 Tammy Hill 0 EDC Remote Login (hidden)
01/17/20 09:42:58 01/17/20 09:42:58 Tammy Hill 0 EDC Remote Login (hidden)
01/17/20 09:42:58 01/17/20 09:42:58 Tammy Hill 0 EDC Remote Login (hidden)
01/17/20 09:43:57 01/17/20 09:43:57 Tammy Hill 0 EDC Remote Login (hidden)
01/17/20 09:50:04 01/17/20 09:50:04 Grant Sutherland 0 Query Tasks
01/17/20 10:04:56 01/17/20 10:04:56 Tammy Hill 0 Remote Control Machine (hidden)
01/17/20 10:06:12 01/17/20 10:06:12 Tammy Hill 0 Query Services
01/17/20 10:06:23 01/17/20 10:06:23 Tammy Hill 0 Start Service pvnc
01/17/20 10:06:46 01/17/20 10:06:46 Tammy Hill 0 Remote Control Machine (hidden)
01/17/20 10:07:18 01/17/20 10:07:18 Tammy Hill 0 EDC Remote Login (hidden)
01/17/20 11:26:56 01/17/20 11:26:56 Melvin Terry 0 Get files/folders D:
\BootDrv\AlohaQS\tmp\System99.
evt
01/17/20 11:27:14 01/17/20 11:27:14 Melvin Terry 0 Query Tasks
01/17/20 11:27:57 01/17/20 11:27:57 Melvin Terry 0 Get files/folders D:
\BootDrv\AlohaQS\tmp\Application9
9.evt
01/17/20 11:31:06 01/17/20 11:31:06 Melvin Terry 0 Run Command net user
01/17/20 11:38:54 01/17/20 11:38:54 Melvin Terry 0 Run Command chkdsk
01/17/20 12:21:17 01/17/20 12:21:17 Melvin Terry 0 Remote Control Machine (hidden)
01/17/20 12:23:07 01/17/20 12:23:07 Melvin Terry 0 Run Command net user
01/17/20 12:27:54 01/17/20 12:27:54 Melvin Terry 0 Run Command net user
01/17/20 12:28:18 01/17/20 12:28:18 Melvin Terry 0 Remote Control Machine (hidden)
01/17/20 12:34:43 01/17/20 12:34:43 Melvin Terry 0 Remote Control Machine (hidden)
01/17/20 12:35:55 01/17/20 12:35:55 Melvin Terry 0 Remote Control Machine (hidden)
01/17/20 12:40:04 01/17/20 12:40:04 Melvin Terry 0 Generate Aloha POS Diag transferChunked
01/18/20 09:16:51 01/18/20 09:16:51 Vladan Mihajlovic 2 Remote Control Machine (hidden)
01/18/20 09:17:08 01/18/20 09:17:08 Vladan Mihajlovic 1 Screenshot
01/18/20 09:17:12 01/18/20 09:17:12 Vladan Mihajlovic 3 Screenshot
01/18/20 09:17:16 01/18/20 09:17:16 Vladan Mihajlovic 4 Screenshot
01/18/20 09:17:24 01/18/20 09:17:24 Vladan Mihajlovic 5 Screenshot
01/18/20 09:17:28 01/18/20 09:17:28 Vladan Mihajlovic 4 Screenshot
01/18/20 09:17:44 01/18/20 09:17:44 Vladan Mihajlovic 4 View File C:\BootDrv\AlohaQS\tmp\DEBOUT.
20200118.04
01/18/20 09:17:53 01/18/20 09:17:53 Vladan Mihajlovic 4 Screenshot
01/18/20 09:18:14 01/18/20 09:18:14 Vladan Mihajlovic 5 Screenshot
01/18/20 09:18:18 01/18/20 09:18:18 Vladan Mihajlovic 3 Screenshot
01/18/20 09:18:25 01/18/20 09:18:25 Vladan Mihajlovic 3 Remote Control Machine (hidden)
01/18/20 09:20:33 01/18/20 09:20:33 Vladan Mihajlovic 4 Screenshot
01/18/20 09:20:39 01/18/20 09:20:39 Vladan Mihajlovic 5 Screenshot
01/18/20 09:20:43 01/18/20 09:20:43 Vladan Mihajlovic 5 Remote Control Machine (hidden)
01/18/20 09:23:11 01/18/20 09:23:11 Vladan Mihajlovic 5 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 0 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 1 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 2 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 3 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 4 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 5 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 201 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 202 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 203 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:23:59 01/18/20 09:23:59 Vladan Mihajlovic 205 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/18/20 09:24:05 01/18/20 09:24:05 Vladan Mihajlovic 0 Query Services
01/18/20 09:24:09 01/18/20 09:24:09 Vladan Mihajlovic 0 Restart Service AlAdmSvr
01/18/20 09:24:25 01/18/20 09:24:25 Vladan Mihajlovic 3 Screenshot
01/18/20 09:24:32 01/18/20 09:24:32 Vladan Mihajlovic 4 Screenshot
01/18/20 09:24:35 01/18/20 09:24:35 Vladan Mihajlovic 4 Remote Control Machine (hidden)
01/18/20 09:24:41 01/18/20 09:24:41 Vladan Mihajlovic 5 Remote Control Machine (hidden)
01/18/20 09:25:44 01/18/20 09:25:44 Vladan Mihajlovic 4 Screenshot
01/18/20 09:25:50 01/18/20 09:25:50 Vladan Mihajlovic 5 Screenshot
01/18/20 09:25:54 01/18/20 09:25:54 Vladan Mihajlovic 3 Screenshot
01/18/20 09:25:59 01/18/20 09:25:59 Vladan Mihajlovic 2 Screenshot
01/18/20 09:26:02 01/18/20 09:26:02 Vladan Mihajlovic 1 Screenshot
01/18/20 09:26:08 01/18/20 09:26:08 Vladan Mihajlovic 5 Screenshot
01/18/20 09:26:13 01/18/20 09:26:13 Vladan Mihajlovic 5 Remote Control Machine (hidden)
01/18/20 09:26:45 01/18/20 09:26:45 Vladan Mihajlovic 5 Query Environment
01/18/20 09:26:47 01/18/20 09:26:47 Vladan Mihajlovic 5 Screenshot
01/18/20 09:27:19 01/18/20 09:27:19 Vladan Mihajlovic 4 Screenshot
01/18/20 09:27:52 01/18/20 09:27:52 Vladan Mihajlovic 0 Remote Control Machine (hidden)
01/18/20 09:28:05 01/18/20 09:28:05 Vladan Mihajlovic 0 Remote Control Machine (hidden)
01/18/20 09:28:19 01/18/20 09:28:19 Vladan Mihajlovic 0 Query Tasks
01/18/20 09:28:32 01/18/20 09:28:32 Vladan Mihajlovic 0 Query Services
01/21/20 20:07:15 01/21/20 20:07:15 Sanja Srdic 205 Run Command netsh advfirewall set allprofiles
state off
01/21/20 20:07:37 01/21/20 20:07:37 Sanja Srdic 0 Run Command arp -a
01/22/20 04:32:58 01/22/20 04:32:58 Daliborka Vrhovac 0 Query Services
01/22/20 04:33:03 01/22/20 04:33:03 Daliborka Vrhovac 0 Restart Service CtlSvr
01/22/20 04:33:44 01/22/20 04:33:44 Daliborka Vrhovac 0 Query Services
01/22/20 04:33:44 01/22/20 04:33:44 Daliborka Vrhovac 205 Query Services
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 0 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 1 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 2 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 3 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 4 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 5 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 202 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 203 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 205 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:33:54 01/22/20 04:33:54 Daliborka Vrhovac 201 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 04:34:21 01/22/20 04:34:21 Daliborka Vrhovac 0 Query Services
01/22/20 04:34:30 01/22/20 04:34:30 Daliborka Vrhovac 0 Restart Service AlohaKitchenService
01/22/20 04:35:40 01/22/20 04:35:40 Daliborka Vrhovac 0 Run Command net user
01/22/20 04:35:50 01/22/20 04:35:50 Daliborka Vrhovac 0 Run Command arp -a
01/22/20 04:38:52 01/22/20 04:38:52 Daliborka Vrhovac 0 Reboot
01/22/20 04:40:22 01/22/20 04:40:22 Daliborka Vrhovac 205 Screenshot
01/22/20 04:40:56 01/22/20 04:40:56 Daliborka Vrhovac 0 Screenshot
01/22/20 04:41:16 01/22/20 04:41:16 Daliborka Vrhovac 0 Remote Control Machine (hidden)
01/22/20 04:42:10 01/22/20 04:42:10 Daliborka Vrhovac 0 Reboot
01/22/20 04:45:42 01/22/20 04:45:42 Daliborka Vrhovac 0 Query Services
01/22/20 04:46:58 01/22/20 04:46:58 Daliborka Vrhovac 0 Query Services
01/22/20 04:47:37 01/22/20 04:47:37 Andrej Karan 0 Run Command ip config
01/22/20 04:47:58 01/22/20 04:47:58 Andrej Karan 0 Screenshot
01/22/20 04:48:09 01/22/20 04:48:09 Andrej Karan 0 Run Command arp -a
01/22/20 04:48:20 01/22/20 04:48:20 Andrej Karan 0 Query Services
01/22/20 04:49:07 01/22/20 04:49:07 Andrej Karan 0 Run Command arp -a
01/22/20 04:49:26 01/22/20 04:49:26 Andrej Karan 0 Query Services
01/22/20 04:50:36 01/22/20 04:50:36 Daliborka Vrhovac 0 Query Services
01/22/20 04:51:11 01/22/20 04:51:11 Andrej Karan 0 Run Command arp -a
01/22/20 04:51:21 01/22/20 04:51:21 Daliborka Vrhovac 0 Edit File D:\BootDrv\AlohaQS\Data\ALOHA.
INI
01/22/20 04:51:36 01/22/20 04:51:36 Daliborka Vrhovac 0 Remote Control Machine (hidden)
01/22/20 04:52:10 01/22/20 04:52:10 Andrej Karan 0 Run Command Ipconfig /all
01/22/20 04:52:12 01/22/20 04:52:12 Daliborka Vrhovac 0 Query Tasks
01/22/20 04:52:52 01/22/20 04:52:52 Andrej Karan 205 Screenshot
01/22/20 04:53:27 01/22/20 04:53:27 Andrej Karan 0 Screenshot
01/22/20 04:53:39 01/22/20 04:53:39 Andrej Karan 0 Query Services
01/22/20 04:55:55 01/22/20 04:55:55 Daliborka Vrhovac 0 Remote Control Machine (hidden)
01/22/20 05:06:22 01/22/20 05:06:22 Andrej Karan 0 Run Command arp -a
01/22/20 06:10:27 01/22/20 06:10:27 Srdjan Poprzen 2 Remote Control Machine (hidden)
01/22/20 06:11:33 01/22/20 06:11:33 Srdjan Poprzen 1 Screenshot
01/22/20 06:13:15 01/22/20 06:13:15 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:13:18 01/22/20 06:13:18 Srdjan Poprzen 0 Remote Control Machine (hidden)
01/22/20 06:15:03 01/22/20 06:15:03 Srdjan Poprzen 0 Query Tasks
01/22/20 06:15:17 01/22/20 06:15:17 Srdjan Poprzen 0 Query Services
01/22/20 06:15:23 01/22/20 06:15:23 Srdjan Poprzen 0 Restart Service pvnc
01/22/20 06:15:30 01/22/20 06:15:30 Srdjan Poprzen 0 Screenshot
01/22/20 06:15:42 01/22/20 06:15:42 Srdjan Poprzen 0 Remote Control Machine (hidden)
01/22/20 06:16:17 01/22/20 06:16:17 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:22:08 01/22/20 06:22:08 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:22:12 01/22/20 06:22:12 Srdjan Poprzen 0 Remote Control Machine (hidden)
01/22/20 06:24:12 01/22/20 06:24:12 Srdjan Poprzen 0 EDC Remote Login (hidden)
01/22/20 06:24:18 01/22/20 06:24:18 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:26:44 01/22/20 06:26:44 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:28:30 01/22/20 06:28:30 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:30:47 01/22/20 06:30:47 Srdjan Poprzen 0 CfcRemoteLogin (hidden)
01/22/20 06:30:49 01/22/20 06:30:49 Srdjan Poprzen 0 Remote Control Machine (hidden)
01/22/20 06:34:23 01/22/20 06:34:23 Srdjan Poprzen 2 Zip File C:\BootDrv\AlohaQS\DATA|C:
\BootDrv\AlohaQS\DATA.zip
01/22/20 06:34:31 01/22/20 06:34:31 Srdjan Poprzen 2 Remote Control Machine (hidden)
01/22/20 06:36:24 01/22/20 06:36:24 Srdjan Poprzen 1 Remote Control Machine (hidden)
01/22/20 06:37:36 01/22/20 06:37:36 Srdjan Poprzen 3 Screenshot
01/22/20 06:37:56 01/22/20 06:37:56 Srdjan Poprzen 3 Remote Control Machine (hidden)
01/22/20 06:38:33 01/22/20 06:38:33 Srdjan Poprzen 1 Remote Control Machine (hidden)
01/22/20 06:39:59 01/22/20 06:39:59 Srdjan Poprzen 3 Remote Control Machine (hidden)
01/22/20 06:41:39 01/22/20 06:41:39 Srdjan Poprzen 4 Screenshot
01/22/20 06:41:43 01/22/20 06:41:43 Srdjan Poprzen 4 Remote Control Machine (hidden)
01/22/20 06:41:48 01/22/20 06:41:48 Srdjan Poprzen 4 Query Tasks
01/22/20 06:42:35 01/22/20 06:42:35 Srdjan Poprzen 5 Remote Control Machine (hidden)
01/22/20 06:43:24 01/22/20 06:43:24 Srdjan Poprzen 3 Remote Control Machine (hidden)
01/22/20 06:43:35 01/22/20 06:43:35 Vedrana Letic 1 Screenshot
01/22/20 06:43:46 01/22/20 06:43:46 Vedrana Letic 2 Screenshot
01/22/20 06:43:50 01/22/20 06:43:50 Vedrana Letic 3 Screenshot
01/22/20 06:44:20 01/22/20 06:44:20 Srdjan Poprzen 1 Screenshot
01/22/20 06:44:28 01/22/20 06:44:28 Srdjan Poprzen 2 Remote Control Machine (hidden)
01/22/20 06:44:28 01/22/20 06:44:28 Vedrana Letic 4 Screenshot
01/22/20 06:44:55 01/22/20 06:44:55 Srdjan Poprzen 0 Remote Control Machine (hidden)
01/22/20 06:45:15 01/22/20 06:45:15 Srdjan Poprzen 1 Remote Control Machine (hidden)
01/22/20 06:45:21 01/22/20 06:45:21 Vedrana Letic 4 Query Services
01/22/20 06:45:26 01/22/20 06:45:26 Vedrana Letic 4 Restart Service pvnc
01/22/20 06:45:32 01/22/20 06:45:32 Vedrana Letic 4 Screenshot
01/22/20 06:45:40 01/22/20 06:45:40 Vedrana Letic 5 Screenshot
01/22/20 06:45:44 01/22/20 06:45:44 Vedrana Letic 1 Screenshot
01/22/20 06:45:52 01/22/20 06:45:52 Vedrana Letic 1 Remote Control Machine (hidden)
01/22/20 06:50:03 01/22/20 06:50:03 Srdjan Poprzen 2 Screenshot
01/22/20 06:50:12 01/22/20 06:50:12 Srdjan Poprzen 4 Screenshot
01/22/20 06:50:17 01/22/20 06:50:17 Srdjan Poprzen 5 Screenshot
01/22/20 06:50:35 01/22/20 06:50:35 Srdjan Poprzen 5 Remote Control Machine (hidden)
01/22/20 06:54:16 01/22/20 06:54:16 Srdjan Poprzen 4 Remote Control Machine (hidden)
01/22/20 06:55:18 01/22/20 06:55:18 Srdjan Poprzen 2 Remote Control Machine (hidden)
01/22/20 06:55:50 01/22/20 06:55:50 Srdjan Poprzen 1 Remote Control Machine (hidden)
01/22/20 06:56:31 01/22/20 06:56:31 Srdjan Poprzen 1 Remote Control Machine (hidden)
01/22/20 06:57:17 01/22/20 06:57:17 Srdjan Poprzen 1 Query Tasks
01/22/20 11:38:44 01/22/20 11:38:44 Marko Bjelic 1 Remote Control Machine (hidden)
01/22/20 11:40:01 01/22/20 11:40:01 Marko Bjelic 1 Query Tasks
01/22/20 11:40:11 01/22/20 11:40:11 Marko Bjelic 1 Query Services
01/22/20 11:40:14 01/22/20 11:40:14 Marko Bjelic 2 Query Services
01/22/20 11:40:28 01/22/20 11:40:28 Marko Bjelic 1 Remote Control Machine (hidden)
01/22/20 11:41:03 01/22/20 11:41:03 Marko Bjelic 0 Get files/folders D:\BootDrv\AlohaQS\DATA
01/22/20 11:42:37 01/22/20 11:42:37 Marko Bjelic 0 Get files/folders D:\BootDrv\AlohaQS\20200121,
D:
\BootDrv\AlohaQS\20200120error,
D:\BootDrv\AlohaQS\20200120,
D:
\BootDrv\AlohaQS\20200119error,
D:\BootDrv\AlohaQS\20200119
01/22/20 11:46:13 01/22/20 11:46:13 Marko Bjelic 0 Get files/folders D:\BootDrv\AlohaQS\20200121,
D:
\BootDrv\AlohaQS\20200120error,
D:\BootDrv\AlohaQS\20200120,
D:
\BootDrv\AlohaQS\20200119error,
D:\BootDrv\AlohaQS\20200119,
D:
\BootDrv\AlohaQS\20200117error,
D:\BootDrv\
01/22/20 12:31:55 01/22/20 12:31:55 Marko Bjelic 1 Get files/folders C:\BootDrv\AlohaQS\20200118
01/22/20 12:35:37 01/22/20 12:35:37 Marko Bjelic 1 Get files/folders C:\BootDrv\AlohaQS\20200118
01/22/20 12:37:35 01/22/20 12:37:35 Marko Bjelic 0 Send files/folders D:\BootDrv\AlohaQS\20200118
01/22/20 12:39:29 01/22/20 12:39:29 Marko Bjelic 0 Run Command %iberdir%\bin\grindq /balance /date
20200118
01/22/20 12:48:59 01/22/20 12:48:59 Marko Bjelic 0 Remote Control Machine (hidden)
01/22/20 12:49:33 01/22/20 12:49:33 Marko Bjelic 0 Remote Control Machine (hidden)
01/22/20 19:37:35 01/22/20 19:37:35 Sinisa Mihajlovic 205 Run Command NetSh Advfirewall set allprofiles
state off
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 0 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 1 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 2 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 3 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 4 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 5 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 201 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 202 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 203 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:37:39 01/22/20 19:37:39 Sinisa Mihajlovic 205 Run Command netsh int ip delete arpcache
&& ipconfig /flushdns
01/22/20 19:44:04 01/22/20 19:44:04 Sinisa Mihajlovic 2 Screenshot
01/22/20 19:47:13 01/22/20 19:47:13 Sinisa Mihajlovic 2 Screenshot
01/22/20 20:05:58 01/22/20 20:05:58 Sinisa Mihajlovic 2 Screenshot
01/22/20 20:38:20 01/22/20 20:38:20 Belma Kobilj 2 Screenshot
01/22/20 20:39:12 01/22/20 20:39:12 Belma Kobilj 4 Screenshot
01/22/20 20:39:39 01/22/20 20:39:39 Belma Kobilj 3 Screenshot
01/22/20 20:40:11 01/22/20 20:40:11 Belma Kobilj 2 Screenshot
01/22/20 20:42:03 01/22/20 20:42:03 Belma Kobilj 3 Remote Control Machine (hidden)
01/22/20 20:42:26 01/22/20 20:42:26 Belma Kobilj 2 Remote Control Machine (hidden)
01/22/20 20:42:52 01/22/20 20:42:52 Belma Kobilj 2 Screenshot
01/22/20 20:42:57 01/22/20 20:42:57 Belma Kobilj 2 Remote Control Machine (hidden)
01/22/20 20:44:40 01/22/20 20:44:40 Belma Kobilj 5 Remote Control Machine (hidden)
01/22/20 20:44:55 01/22/20 20:44:55 Belma Kobilj 205 Screenshot
01/22/20 20:45:43 01/22/20 20:45:43 Belma Kobilj 2 Remote Control Machine (hidden)
01/22/20 21:42:27 01/22/20 21:42:27 Sinisa Mihajlovic 2 Query Environment
01/22/20 21:43:39 01/22/20 21:43:39 Sinisa Mihajlovic 2 Query Environment
01/22/20 21:47:44 01/22/20 21:47:44 Sinisa Mihajlovic 2 Screenshot
01/22/20 21:47:50 01/22/20 21:47:50 Sinisa Mihajlovic 2 Remote Control Machine (hidden)
01/22/20 21:53:49 01/22/20 21:53:49 Sinisa Mihajlovic 2 Remote Control Machine (hidden)
01/23/20 09:32:52 01/23/20 09:32:52 Jason Simmons 0 Remote Control Machine (hidden)
01/23/20 10:00:44 01/23/20 10:00:44 Jason Simmons 0 Query Tasks
01/23/20 10:14:37 01/23/20 10:14:37 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 08:09:26 01/24/20 08:09:26 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 08:14:26 01/24/20 08:14:26 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 08:51:32 01/24/20 08:51:32 Jason Simmons 0 Reset Ext Auth Info jason.simmons@ncr.com
01/24/20 08:52:53 01/24/20 08:52:53 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 08:59:40 01/24/20 08:59:40 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 09:00:31 01/24/20 09:00:31 Jason Simmons 0 Query Services
01/24/20 09:00:35 01/24/20 09:00:35 Jason Simmons 0 Query Tasks
01/24/20 09:00:36 01/24/20 09:00:36 Jason Simmons 0 Query Services
01/24/20 09:01:09 01/24/20 09:01:09 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 09:05:02 01/24/20 09:05:02 Jason Simmons 0 Query Tasks
01/24/20 09:27:18 01/24/20 09:27:18 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 11:01:57 01/24/20 11:01:57 Jason Simmons 0 Reset Ext Auth Info jason.simmons@ncr.com
01/24/20 11:05:19 01/24/20 11:05:19 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 11:51:49 01/24/20 11:51:49 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 12:29:11 01/24/20 12:29:11 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 12:48:22 01/24/20 12:48:22 Jason Simmons 0 Reboot
01/24/20 12:59:47 01/24/20 12:59:47 Jason Simmons 0 Query Tasks
01/24/20 13:00:07 01/24/20 13:00:07 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 13:02:59 01/24/20 13:02:59 Jason Simmons 0 CfcRemoteLogin (hidden)
01/24/20 13:03:04 01/24/20 13:03:04 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 13:03:56 01/24/20 13:03:56 Jason Simmons 0 Remote Control Machine (hidden)
01/24/20 13:06:49 01/24/20 13:06:49 Jason Simmons 2 View File C:\BootDrv\AlohaQS\DOWNTIME.
INI
01/24/20 13:07:09 01/24/20 13:07:09 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\DATA|C:
\BootDrv\AlohaQS\Copy of
DATA|False
01/24/20 13:07:46 01/24/20 13:07:46 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\DATA.old|C:
\BootDrv\AlohaQS\xDATA.old
01/24/20 13:07:50 01/24/20 13:07:50 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\DATA.old1|C:
\BootDrv\AlohaQS\xDATA.old1
01/24/20 13:08:14 01/24/20 13:08:14 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\Copy of
EDC|C:\BootDrv\AlohaQS\xCopy of
EDC
01/24/20 13:08:20 01/24/20 13:08:20 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\Copy of
DATA|C:\BootDrv\AlohaQS\xCopy
of DATA
01/24/20 13:08:23 01/24/20 13:08:23 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\DATA|C:
\BootDrv\AlohaQS\Copy of
DATA|False
01/24/20 13:08:31 01/24/20 13:08:31 Jason Simmons 2 Move|Rename File C:\BootDrv\AlohaQS\EDC|C:
\BootDrv\AlohaQS\Copy of
EDC|False
01/24/20 14:36:42 01/24/20 14:36:42 Ervin John Benigra 0 Run Command %iberdir%
\ftp\InsightInstall.exe /install
01/24/20 14:37:55 01/24/20 14:37:55 Ervin John Benigra 0 Run Command %iberdir%
\ftp\InsightInstall.exe /upgrade
01/24/20 14:38:05 01/24/20 14:38:05 Ervin John Benigra 0 Run Command sc config aloha start= auto
01/24/20 14:38:10 01/24/20 14:38:10 Ervin John Benigra 0 Delete File D:
\BOOTDRV\AlohaQS\FTP\Polling\Z
DONE
01/24/20 14:38:18 01/24/20 14:38:18 Ervin John Benigra 0 Run Command %iberdir%\ftp\genpoll /date
20200123
01/24/20 14:38:29 01/24/20 14:38:29 Ervin John Benigra 0 Send files/folders D:
\BOOTDRV\AlohaQS\FTP\ForceEv
ent
01/24/20 14:38:46 01/24/20 14:38:46 Ervin John Benigra 0 View File D:
\BOOTDRV\AlohaQS\FTP\InsightIn
stall.log
01/24/20 14:56:52 01/24/20 14:56:52 O’Day Baker 0 Remote Control Machine (hidden)
01/24/20 14:57:44 01/24/20 14:57:44 Richard Garrett 0 View File C:\Program Files
(x86)
\NCRBackOffice\AlohaExport.vbs
01/24/20 14:58:05 01/24/20 14:58:05 Richard Garrett 0 Run Command at
01/24/20 14:58:15 01/24/20 14:58:15 Richard Garrett 0 Run Command schtasks
01/24/20 14:58:23 01/24/20 14:58:23 Richard Garrett 0 View File C:\Program Files
(x86)
\NCRBackOffice\SetupTasks.bat
01/24/20 14:58:43 01/24/20 14:58:43 Richard Garrett 0 Delete File C:\Program Files
(x86)
\NCRBackOffice\SetupTasks.bat
01/24/20 15:00:14 01/24/20 15:00:14 O’Day Baker 2 View File C:\BootDrv\AlohaQS\DOWNTIME.
INI
01/24/20 15:16:44 01/24/20 15:16:44 Richard Garrett 0 Send files/folders C:\Program Files
(x86)\NCRBackOffice\Goldco
Schauto.bat
01/24/20 15:16:53 01/24/20 15:16:53 Richard Garrett 0 Edit File C:\Program Files
(x86)\NCRBackOffice\Goldco
Schauto.bat
01/24/20 15:18:36 01/24/20 15:18:36 Richard Garrett 0 View File C:\Menulink\WindowSwitcher.bat
01/24/20 15:18:39 01/24/20 15:18:39 Richard Garrett 0 View File C:\Menulink\Schauto.bat
01/24/20 15:18:54 01/24/20 15:18:54 Richard Garrett 0 Edit File C:\Menulink\Schauto.bat
01/24/20 15:19:31 01/24/20 15:19:31 Richard Garrett 0 Execute C:\Menulink\Schauto.bat
01/24/20 15:19:43 01/24/20 15:19:43 Richard Garrett 0 Run Command schtasks
01/24/20 15:20:21 01/24/20 15:20:21 Richard Garrett 0 Get files/folders C:\Menulink\Schauto.bat
01/24/20 15:22:35 01/24/20 15:22:35 Richard Garrett 0 View File C:\Menulink\Currentday.vbs
01/24/20 15:22:37 01/24/20 15:22:37 Richard Garrett 0 View File C:\Menulink\EODImport.vbs
01/24/20 15:22:39 01/24/20 15:22:39 Richard Garrett 0 View File C:\Menulink\EmployeeExport.vbs
01/24/20 15:22:45 01/24/20 15:22:45 Richard Garrett 0 View File C:\Menulink\SchedExport.vbs
01/24/20 15:23:11 01/24/20 15:23:11 Richard Garrett 0 View File C:\Menulink\Schauto.bat
01/24/20 15:23:31 01/24/20 15:23:31 Richard Garrett 0 Execute C:\Menulink\EODImport.bat
01/24/20 15:23:36 01/24/20 15:23:36 Richard Garrett 0 Execute C:\Menulink\SchedExport.bat
01/24/20 15:23:42 01/24/20 15:23:42 Richard Garrett 0 Execute C:\Menulink\EmployeeExport.bat
01/24/20 18:06:54 01/24/20 18:06:54 Danijel Basic 0 Remote Control Machine (hidden)
01/24/20 18:08:21 01/24/20 18:08:21 Danijel Basic 0 Remote Control Machine (hidden)
01/24/20 21:50:32 01/24/20 21:50:32 Wyndell Pepino 0 Send files/folders D:
\BOOTDRV\AlohaQS\ftp\Install_Pul
seAgent.exe
01/24/20 21:51:21 01/24/20 21:51:21 Wyndell Pepino 0 Execute D:
\BOOTDRV\AlohaQS\ftp\Install_Pul
seAgent.exe
01/25/20 07:50:14 01/25/20 07:50:14 Milan Vukadinovic 0 Remote Control Machine (hidden)
01/25/20 08:00:41 01/25/20 08:00:41 Milan Vukadinovic 0 Remote Control Machine (hidden)
01/25/20 08:02:42 01/25/20 08:02:42 Milan Vukadinovic 0 Run Command %IBERDIR%
\bin\grindq /balance /date 20200125
01/25/20 19:06:46 01/25/20 19:06:46 Sasa Gagic 0 Remote Control Machine (hidden)
01/25/20 19:18:05 01/25/20 19:18:05 Danijel Basic 0 Remote Control Machine (hidden)
01/25/20 19:18:54 01/25/20 19:18:54 Danijel Basic 0 Remote Control Machine (hidden)
01/25/20 19:21:15 01/25/20 19:21:15 Danijel Basic 0 Remote Control Machine (hidden)
01/25/20 19:30:42 01/25/20 19:30:42 Danijel Basic 0 Remote Control Machine (hidden)
01/26/20 01:17:58 01/26/20 01:17:58 Branko Mihajlovic 0 Remote Control Machine (hidden)
01/26/20 01:19:01 01/26/20 01:19:01 Branko Mihajlovic 0 View File D:
\BOOTDRV\AlohaQS\DATA\ALOHA
.INI
01/26/20 01:28:06 01/26/20 01:28:06 Branko Mihajlovic 0 Screenshot
01/26/20 01:28:29 01/26/20 01:28:29 Branko Mihajlovic 0 Screenshot
01/26/20 01:28:45 01/26/20 01:28:45 Branko Mihajlovic 0 Screenshot
01/27/20 12:28:17 01/27/20 12:28:17 David Bolduc 0 Remote Control Machine (hidden)
01/27/20 12:29:07 01/27/20 12:29:07 David Bolduc 0 Remote Control Machine (hidden)
01/27/20 12:29:55 01/27/20 12:29:55 David Bolduc 0 Query Services
01/27/20 12:30:00 01/27/20 12:30:00 David Bolduc 0 Start Service pvnc
01/27/20 12:30:05 01/27/20 12:30:05 David Bolduc 0 Query Services
01/27/20 12:57:59 01/27/20 12:57:59 David Bolduc 0 Remote Control Machine (hidden)
01/27/20 17:01:21 01/27/20 17:01:21 Dragomir Babic 0 Screenshot
01/27/20 17:01:28 01/27/20 17:01:28 Dragomir Babic 1 Screenshot
01/27/20 17:03:20 01/27/20 17:03:20 Dragomir Babic 0 Query Services
01/27/20 17:03:21 01/27/20 17:03:21 Andrej Mihajlovic 0 Query Services
01/27/20 17:03:25 01/27/20 17:03:25 Dragomir Babic 0 Restart Service CtlSvr
01/27/20 17:03:58 01/27/20 17:03:58 Dragomir Babic 0 Query Tasks
01/27/20 17:03:59 01/27/20 17:03:59 Dragomir Babic 0 Query Services