PDB for Amd64, guid: e7477a03-a707-8050-cb79-36455ce346b5, age: 1 NtLoadDriver() -> 0x0 pool: 0xffff948957c5c810 | file object: 0xffff948957c5c890 | offsetby: 0x80 \$Directory pool: 0xffff948957c5dc60 | file object: 0xffff948957c5dce0 | offsetby: 0x80 \Windows\System32\nsisvc.dll pool: 0xffff948957c74320 | file object: 0xffff948957c74380 | offsetby: 0x60 [NOT READABLE] pool: 0xffff948957c74600 | file object: 0xffff948957c74660 | offsetby: 0x60 \Windows\System32\drivers\wcifs.sys pool: 0xffff948957c74770 | file object: 0xffff948957c747d0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff948957c748e0 | file object: 0xffff948957c74940 | offsetby: 0x60 \Windows\System32\drivers\storqosflt.sys pool: 0xffff948957c74a50 | file object: 0xffff948957c74ab0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a2f8040 | file object: 0xffff94895a2f80a0 | offsetby: 0x60 \$Mft::$BITMAP pool: 0xffff94895a2f81b0 | file object: 0xffff94895a2f8210 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a2f8490 | file object: 0xffff94895a2f84f0 | offsetby: 0x60 \$LogFile pool: 0xffff94895a2f8770 | file object: 0xffff94895a2f87d0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000004 pool: 0xffff94895a2f8bc0 | file object: 0xffff94895a2f8c20 | offsetby: 0x60 \$MftMirr pool: 0xffff94895a2f8d30 | file object: 0xffff94895a2f8d90 | offsetby: 0x60 \$Secure:$SDS:$DATA pool: 0xffff94895a2f9010 | file object: 0xffff94895a2f9070 | offsetby: 0x60 \$Secure:$SII:$INDEX_ALLOCATION pool: 0xffff94895a2f92f0 | file object: 0xffff94895a2f9350 | offsetby: 0x60 \Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys pool: 0xffff94895a2f9460 | file object: 0xffff94895a2f94c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a2f9a20 | file object: 0xffff94895a2f9a80 | offsetby: 0x60 \$Mft pool: 0xffff94895a2f9e70 | file object: 0xffff94895a2f9ed0 | offsetby: 0x60 \$BitMap pool: 0xffff94895a740040 | file object: 0xffff94895a7400a0 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair:$Verify:$DATA pool: 0xffff94895a7401b0 | file object: 0xffff94895a740210 | offsetby: 0x60 \$Extend\$UsnJrnl:$J:$DATA pool: 0xffff94895a740320 | file object: 0xffff94895a740380 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair:$Corrupt:$DATA pool: 0xffff94895a740490 | file object: 0xffff94895a7404f0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf pool: 0xffff94895a740600 | file object: 0xffff94895a740660 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895a7408e0 | file object: 0xffff94895a740940 | offsetby: 0x60 \Windows\System32\drivers\cdrom.sys pool: 0xffff94895a740a50 | file object: 0xffff94895a740ab0 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair pool: 0xffff94895a740bc0 | file object: 0xffff94895a740c20 | offsetby: 0x60 \:$I30:$INDEX_ALLOCATION pool: 0xffff94895a740d30 | file object: 0xffff94895a740d90 | offsetby: 0x60 \$Extend\$Deleted:$I30:$INDEX_ALLOCATION pool: 0xffff94895a741010 | file object: 0xffff94895a741070 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895a741460 | file object: 0xffff94895a7414c0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog:$I30:$INDEX_ALLOCATION pool: 0xffff94895a741740 | file object: 0xffff94895a7417a0 | offsetby: 0x60 \$Directory pool: 0xffff94895a741b90 | file object: 0xffff94895a741bf0 | offsetby: 0x60 \$Extend:$I30:$INDEX_ALLOCATION pool: 0xffff94895a741d00 | file object: 0xffff94895a741d60 | offsetby: 0x60 \Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a7e1030 | file object: 0xffff94895a7e1090 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms pool: 0xffff94895a7e1310 | file object: 0xffff94895a7e1370 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM.blf pool: 0xffff94895a7e1480 | file object: 0xffff94895a7e14e0 | offsetby: 0x60 \SystemRoot\System32\Config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895a7e1d20 | file object: 0xffff94895a7e1d80 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms pool: 0xffff94895a7e2170 | file object: 0xffff94895a7e21d0 | offsetby: 0x60 \$Directory pool: 0xffff94895a7e2450 | file object: 0xffff94895a7e24b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a7e25c0 | file object: 0xffff94895a7e2620 | offsetby: 0x60 \SystemRoot\System32\Config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895a7e4110 | file object: 0xffff94895a7e4170 | offsetby: 0x60 \$ConvertToNonresident pool: 0xffff94895a7e4560 | file object: 0xffff94895a7e45c0 | offsetby: 0x60 \$ConvertToNonresident pool: 0xffff94895a7e4e00 | file object: 0xffff94895a7e4e60 | offsetby: 0x60 \Windows\System32\drivers\monitor.sys pool: 0xffff94895a7e50e0 | file object: 0xffff94895a7e5140 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a7f81b0 | file object: 0xffff94895a7f8210 | offsetby: 0x60 \Windows\System32\drivers\crashdmp.sys pool: 0xffff94895a7f8320 | file object: 0xffff94895a7f8380 | offsetby: 0x60 KtmLog pool: 0xffff94895a7f8490 | file object: 0xffff94895a7f84f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a7f8600 | file object: 0xffff94895a7f8660 | offsetby: 0x60 \$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION pool: 0xffff94895a7f8a50 | file object: 0xffff94895a7f8ab0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000003 pool: 0xffff94895a7f8bc0 | file object: 0xffff94895a7f8c20 | offsetby: 0x60 TxfLog pool: 0xffff94895a7f8d30 | file object: 0xffff94895a7f8d90 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA pool: 0xffff94895a7f9180 | file object: 0xffff94895a7f91e0 | offsetby: 0x60 \Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a7f92f0 | file object: 0xffff94895a7f9350 | offsetby: 0x60 \:$I30:$INDEX_ALLOCATION pool: 0xffff94895a7f95d0 | file object: 0xffff94895a7f9630 | offsetby: 0x60 \$Directory pool: 0xffff94895a7f9740 | file object: 0xffff94895a7f97a0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$Tops pool: 0xffff94895a7f98b0 | file object: 0xffff94895a7f9910 | offsetby: 0x60 \Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a7f9a20 | file object: 0xffff94895a7f9a80 | offsetby: 0x60 \$Directory pool: 0xffff94895a7f9b90 | file object: 0xffff94895a7f9bf0 | offsetby: 0x60 \$Extend\$Reparse:$R:$INDEX_ALLOCATION pool: 0xffff94895a825040 | file object: 0xffff94895a8250a0 | offsetby: 0x60 \$Directory pool: 0xffff94895a8251b0 | file object: 0xffff94895a825210 | offsetby: 0x60 \Windows\System32\ntdll.dll pool: 0xffff94895a825490 | file object: 0xffff94895a8254f0 | offsetby: 0x60 \Windows\SysWOW64\ntdll.dll pool: 0xffff94895a825770 | file object: 0xffff94895a8257d0 | offsetby: 0x60 \$Directory pool: 0xffff94895a825a50 | file object: 0xffff94895a825ab0 | offsetby: 0x60 \Windows\System32\drivers\filecrypt.sys pool: 0xffff94895a825bc0 | file object: 0xffff94895a825c20 | offsetby: 0x60 \Windows\System32\drivers\storahci.sys pool: 0xffff94895a825d30 | file object: 0xffff94895a825d90 | offsetby: 0x60 \$Directory pool: 0xffff94895a826010 | file object: 0xffff94895a826070 | offsetby: 0x60 \$Directory pool: 0xffff94895a826460 | file object: 0xffff94895a8264c0 | offsetby: 0x60 \Windows\System32\vertdll.dll pool: 0xffff94895a8265d0 | file object: 0xffff94895a826630 | offsetby: 0x60 \Windows\System32\drivers\Diskdump.sys pool: 0xffff94895a826740 | file object: 0xffff94895a8267a0 | offsetby: 0x60 \Windows\System32\drivers\en-US\ntfs.sys.mui pool: 0xffff94895a826d00 | file object: 0xffff94895a826d60 | offsetby: 0x60 \Windows\System32\drivers\dumpfve.sys pool: 0xffff94895a826e70 | file object: 0xffff94895a826ed0 | offsetby: 0x60 \ProgramData\Microsoft\MF\Active.GRL pool: 0xffff94895a8c8040 | file object: 0xffff94895a8c80a0 | offsetby: 0x60 \Windows\System32\drivers\afunix.sys pool: 0xffff94895a8c8320 | file object: 0xffff94895a8c8380 | offsetby: 0x60 \Windows\System32\drivers\afd.sys pool: 0xffff94895a8c8600 | file object: 0xffff94895a8c8660 | offsetby: 0x60 \Windows\System32\drivers\vwififlt.sys pool: 0xffff94895a8c8770 | file object: 0xffff94895a8c87d0 | offsetby: 0x60 \Windows\System32\drivers\netbt.sys pool: 0xffff94895a8c8a50 | file object: 0xffff94895a8c8ab0 | offsetby: 0x60 \Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys pool: 0xffff94895a8c8bc0 | file object: 0xffff94895a8c8c20 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a8c9180 | file object: 0xffff94895a8c91e0 | offsetby: 0x60 \Windows\System32\drivers\npfs.sys pool: 0xffff94895a8c9460 | file object: 0xffff94895a8c94c0 | offsetby: 0x60 \Windows\System32\drivers\tdi.sys pool: 0xffff94895a8c98b0 | file object: 0xffff94895a8c9910 | offsetby: 0x60 \Windows\System32\drivers\msfs.sys pool: 0xffff94895a8c9b90 | file object: 0xffff94895a8c9bf0 | offsetby: 0x60 \Windows\System32\drivers\tdx.sys pool: 0xffff94895a8f2040 | file object: 0xffff94895a8f20a0 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair:$Verify:$DATA pool: 0xffff94895a8f2320 | file object: 0xffff94895a8f2380 | offsetby: 0x60 \$Secure:$SDS:$DATA pool: 0xffff94895a8f2770 | file object: 0xffff94895a8f27d0 | offsetby: 0x60 \$Extend\$Deleted:$I30:$INDEX_ALLOCATION pool: 0xffff94895a8f2a50 | file object: 0xffff94895a8f2ab0 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair:$Corrupt:$DATA pool: 0xffff94895a8f2bc0 | file object: 0xffff94895a8f2c20 | offsetby: 0x60 \:$I30:$INDEX_ALLOCATION pool: 0xffff94895a8f3010 | file object: 0xffff94895a8f3070 | offsetby: 0x60 \$BitMap pool: 0xffff94895a8f3180 | file object: 0xffff94895a8f31e0 | offsetby: 0x60 \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a8f32f0 | file object: 0xffff94895a8f3350 | offsetby: 0x60 \$Mft::$BITMAP pool: 0xffff94895a8f3460 | file object: 0xffff94895a8f34c0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf pool: 0xffff94895a8f3740 | file object: 0xffff94895a8f37a0 | offsetby: 0x60 \$Mft pool: 0xffff94895a8f38b0 | file object: 0xffff94895a8f3910 | offsetby: 0x60 \$LogFile pool: 0xffff94895a8f3a20 | file object: 0xffff94895a8f3a80 | offsetby: 0x60 \$Extend\$RmMetadata\$Repair pool: 0xffff94895a8f3d00 | file object: 0xffff94895a8f3d60 | offsetby: 0x60 \$Secure:$SII:$INDEX_ALLOCATION pool: 0xffff94895a8f3e70 | file object: 0xffff94895a8f3ed0 | offsetby: 0x60 \$Extend:$I30:$INDEX_ALLOCATION pool: 0xffff94895a931050 | file object: 0xffff94895a9310b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a9311c0 | file object: 0xffff94895a931220 | offsetby: 0x60 \Windows\System32\drivers\kbdclass.sys pool: 0xffff94895a9314a0 | file object: 0xffff94895a931500 | offsetby: 0x60 \Windows\System32\drivers\usbohci.sys pool: 0xffff94895a931780 | file object: 0xffff94895a9317e0 | offsetby: 0x60 \Windows\System32\drivers\ks.sys pool: 0xffff94895a932300 | file object: 0xffff94895a932360 | offsetby: 0x60 \Windows\System32\drivers\usbport.sys pool: 0xffff94895a9325e0 | file object: 0xffff94895a932640 | offsetby: 0x60 \Windows\System32\drivers\CmBatt.sys pool: 0xffff94895a932750 | file object: 0xffff94895a9327b0 | offsetby: 0x60 \Windows\System32\drivers\battc.sys pool: 0xffff94895a9328c0 | file object: 0xffff94895a932920 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a932ba0 | file object: 0xffff94895a932c00 | offsetby: 0x60 \Windows\System32\drivers\VBoxWddm.sys pool: 0xffff94895a932e80 | file object: 0xffff94895a932ee0 | offsetby: 0x60 \Windows\System32\drivers\intelppm.sys pool: 0xffff94895a933160 | file object: 0xffff94895a9331c0 | offsetby: 0x60 \Windows\System32\drivers\E1G6032E.sys pool: 0xffff94895a933440 | file object: 0xffff94895a9334a0 | offsetby: 0x60 \Windows\System32\drivers\VBoxMouse.sys pool: 0xffff94895a9335b0 | file object: 0xffff94895a933610 | offsetby: 0x60 \Windows\System32\drivers\hdaudbus.sys pool: 0xffff94895a933720 | file object: 0xffff94895a933780 | offsetby: 0x60 \Windows\System32\drivers\portcls.sys pool: 0xffff94895a933a00 | file object: 0xffff94895a933a60 | offsetby: 0x60 \Windows\System32\drivers\mouclass.sys pool: 0xffff94895a933b70 | file object: 0xffff94895a933bd0 | offsetby: 0x60 \Windows\System32\drivers\drmk.sys pool: 0xffff94895a934130 | file object: 0xffff94895a934190 | offsetby: 0x60 \Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys pool: 0xffff94895a934410 | file object: 0xffff94895a934470 | offsetby: 0x60 \Windows\System32\drivers\rdpbus.sys pool: 0xffff94895a934e20 | file object: 0xffff94895a934e80 | offsetby: 0x60 \Windows\System32\drivers\NdisVirtualBus.sys pool: 0xffff94895a965040 | file object: 0xffff94895a9650a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a9651b0 | file object: 0xffff94895a965210 | offsetby: 0x60 \Windows\System32\drivers\mssmbios.sys pool: 0xffff94895a965490 | file object: 0xffff94895a9654f0 | offsetby: 0x60 \Windows\System32\drivers\npsvctrig.sys pool: 0xffff94895a965600 | file object: 0xffff94895a965660 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a9658e0 | file object: 0xffff94895a965940 | offsetby: 0x60 \Windows\System32\drivers\nsiproxy.sys pool: 0xffff94895a966010 | file object: 0xffff94895a966070 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a966180 | file object: 0xffff94895a9661e0 | offsetby: 0x60 \Windows\System32\drivers\dam.sys pool: 0xffff94895a966740 | file object: 0xffff94895a9667a0 | offsetby: 0x60 \Windows\System32\drivers\gpuenergydrv.sys pool: 0xffff94895a966a20 | file object: 0xffff94895a966a80 | offsetby: 0x60 \$MftMirr pool: 0xffff94895a966e70 | file object: 0xffff94895a966ed0 | offsetby: 0x60 \Windows\System32\drivers\dfsc.sys pool: 0xffff94895a967040 | file object: 0xffff94895a9670a0 | offsetby: 0x60 \Windows\System32\drivers\pacer.sys pool: 0xffff94895a967320 | file object: 0xffff94895a967380 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a967490 | file object: 0xffff94895a9674f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a967600 | file object: 0xffff94895a967660 | offsetby: 0x60 \$Directory pool: 0xffff94895a967a50 | file object: 0xffff94895a967ab0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a967bc0 | file object: 0xffff94895a967c20 | offsetby: 0x60 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.752.cat pool: 0xffff94895a968180 | file object: 0xffff94895a9681e0 | offsetby: 0x60 \Windows\System32\drivers\netbios.sys pool: 0xffff94895a9682f0 | file object: 0xffff94895a968350 | offsetby: 0x60 \Windows\System32\drivers\VBoxSF.sys pool: 0xffff94895a9685d0 | file object: 0xffff94895a968630 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a968740 | file object: 0xffff94895a9687a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a9688b0 | file object: 0xffff94895a968910 | offsetby: 0x60 \Windows\System32\drivers\rdbss.sys pool: 0xffff94895a968a20 | file object: 0xffff94895a968a80 | offsetby: 0x60 \Windows\System32\drivers\csc.sys pool: 0xffff94895a9f31c0 | file object: 0xffff94895a9f3220 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002 pool: 0xffff94895a9f34a0 | file object: 0xffff94895a9f3500 | offsetby: 0x60 \Windows\apppatch\sysmain.sdb pool: 0xffff94895a9f3610 | file object: 0xffff94895a9f3670 | offsetby: 0x60 \$Directory pool: 0xffff94895a9f3780 | file object: 0xffff94895a9f37e0 | offsetby: 0x60 \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a9f3a60 | file object: 0xffff94895a9f3ac0 | offsetby: 0x60 KtmLog pool: 0xffff94895a9f3bd0 | file object: 0xffff94895a9f3c30 | offsetby: 0x60 \Windows\bootstat.dat pool: 0xffff94895a9f4020 | file object: 0xffff94895a9f4080 | offsetby: 0x60 \Windows\System32\drivers\bam.sys pool: 0xffff94895a9f4190 | file object: 0xffff94895a9f41f0 | offsetby: 0x60 TxfLog pool: 0xffff94895a9f4750 | file object: 0xffff94895a9f47b0 | offsetby: 0x60 \Windows\System32\smss.exe pool: 0xffff94895a9f48c0 | file object: 0xffff94895a9f4920 | offsetby: 0x60 \Windows\System32\drivers\Vid.sys pool: 0xffff94895a9f4e80 | file object: 0xffff94895a9f4ee0 | offsetby: 0x60 \Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog pool: 0xffff94895a9f5160 | file object: 0xffff94895a9f51c0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001 pool: 0xffff94895a9f52d0 | file object: 0xffff94895a9f5330 | offsetby: 0x60 \$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION pool: 0xffff94895a9f5440 | file object: 0xffff94895a9f54a0 | offsetby: 0x60 \Windows\System32\drivers\ahcache.sys pool: 0xffff94895a9f5890 | file object: 0xffff94895a9f58f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895a9f5a00 | file object: 0xffff94895a9f5a60 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$Tops pool: 0xffff94895a9f5b70 | file object: 0xffff94895a9f5bd0 | offsetby: 0x60 \$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA pool: 0xffff94895a9f5ce0 | file object: 0xffff94895a9f5d40 | offsetby: 0x60 \:$I30:$INDEX_ALLOCATION pool: 0xffff94895a9f5e50 | file object: 0xffff94895a9f5eb0 | offsetby: 0x60 \Windows\System32\drivers\i8042prt.sys pool: 0xffff94895a9f6410 | file object: 0xffff94895a9f6470 | offsetby: 0x60 \Windows\System32\drivers\winhvr.sys pool: 0xffff94895a9f6860 | file object: 0xffff94895a9f68c0 | offsetby: 0x60 \Windows\System32\drivers\kdnic.sys pool: 0xffff94895a9f6b40 | file object: 0xffff94895a9f6ba0 | offsetby: 0x60 \Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys pool: 0xffff94895a9f6e20 | file object: 0xffff94895a9f6e80 | offsetby: 0x60 \Windows\System32\drivers\CAD.sys pool: 0xffff94895aa09e60 | file object: 0xffff94895aa09ec0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl pool: 0xffff94895aa0a2b0 | file object: 0xffff94895aa0a310 | offsetby: 0x60 \$Secure:$SDH:$INDEX_ALLOCATION pool: 0xffff94895aa0a420 | file object: 0xffff94895aa0a480 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl pool: 0xffff94895aa0a590 | file object: 0xffff94895aa0a5f0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\LwtNetLog.etl pool: 0xffff94895aa0a700 | file object: 0xffff94895aa0a760 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderApiLogger.etl pool: 0xffff94895aa0a9e0 | file object: 0xffff94895aa0aa40 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\NtfsLog.etl pool: 0xffff94895aa0ab50 | file object: 0xffff94895aa0abb0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RadioMgr.etl pool: 0xffff94895aa0b560 | file object: 0xffff94895aa0b5c0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl pool: 0xffff94895aa0b6d0 | file object: 0xffff94895aa0b730 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0b840 | file object: 0xffff94895aa0b8a0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895aa0bc90 | file object: 0xffff94895aa0bcf0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\NetCore.etl pool: 0xffff94895aa0c250 | file object: 0xffff94895aa0c2b0 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0c3c0 | file object: 0xffff94895aa0c420 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0c6a0 | file object: 0xffff94895aa0c700 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl pool: 0xffff94895aa0c810 | file object: 0xffff94895aa0c870 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0c980 | file object: 0xffff94895aa0c9e0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl pool: 0xffff94895aa0caf0 | file object: 0xffff94895aa0cb50 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl pool: 0xffff94895aa0d950 | file object: 0xffff94895aa0d9b0 | offsetby: 0x60 \Windows\System32\WDI\LogFiles\WdiContextLog.etl.002 pool: 0xffff94895aa0e080 | file object: 0xffff94895aa0e0e0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\Wifi.etl pool: 0xffff94895aa0e920 | file object: 0xffff94895aa0e980 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0ec00 | file object: 0xffff94895aa0ec60 | offsetby: 0x60 \$Directory pool: 0xffff94895aa0ed70 | file object: 0xffff94895aa0edd0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl pool: 0xffff94895aa13050 | file object: 0xffff94895aa130d0 | offsetby: 0x80 \Windows\SysWOW64\profapi.dll pool: 0xffff94895aa131e0 | file object: 0xffff94895aa13260 | offsetby: 0x80 \Windows\SysWOW64\ws2_32.dll pool: 0xffff94895aa13370 | file object: 0xffff94895aa133f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa13500 | file object: 0xffff94895aa13580 | offsetby: 0x80 \Windows\SysWOW64\cryptsp.dll pool: 0xffff94895aa13690 | file object: 0xffff94895aa13710 | offsetby: 0x80 \Windows\SysWOW64\imagehlp.dll pool: 0xffff94895aa13820 | file object: 0xffff94895aa138a0 | offsetby: 0x80 \Windows\SysWOW64\advapi32.dll pool: 0xffff94895aa139b0 | file object: 0xffff94895aa13a30 | offsetby: 0x80 \Windows\SysWOW64\shlwapi.dll pool: 0xffff94895aa13b40 | file object: 0xffff94895aa13bc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa13cd0 | file object: 0xffff94895aa13d50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa13e60 | file object: 0xffff94895aa13ee0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa14180 | file object: 0xffff94895aa14200 | offsetby: 0x80 \Windows\SysWOW64\ucrtbase.dll pool: 0xffff94895aa14310 | file object: 0xffff94895aa14390 | offsetby: 0x80 \Windows\SysWOW64\Wldap32.dll pool: 0xffff94895aa144a0 | file object: 0xffff94895aa14520 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa14630 | file object: 0xffff94895aa146b0 | offsetby: 0x80 \Windows\SysWOW64\user32.dll pool: 0xffff94895aa147c0 | file object: 0xffff94895aa14840 | offsetby: 0x80 \Windows\SysWOW64\msvcp_win.dll pool: 0xffff94895aa14950 | file object: 0xffff94895aa149d0 | offsetby: 0x80 \Windows\SysWOW64\coml2.dll pool: 0xffff94895aa14ae0 | file object: 0xffff94895aa14b60 | offsetby: 0x80 \Windows\SysWOW64\win32u.dll pool: 0xffff94895aa14c70 | file object: 0xffff94895aa14cf0 | offsetby: 0x80 \Windows\SysWOW64\sspicli.dll pool: 0xffff94895aa14e00 | file object: 0xffff94895aa14e80 | offsetby: 0x80 \Windows\SysWOW64\gdi32.dll pool: 0xffff94895aa15120 | file object: 0xffff94895aa151a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa152b0 | file object: 0xffff94895aa15330 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa15440 | file object: 0xffff94895aa154c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa155d0 | file object: 0xffff94895aa15650 | offsetby: 0x80 \Windows\System32\autochk.exe pool: 0xffff94895aa15760 | file object: 0xffff94895aa157e0 | offsetby: 0x80 \Windows\SysWOW64\shell32.dll pool: 0xffff94895aa158f0 | file object: 0xffff94895aa15970 | offsetby: 0x80 \Windows\SysWOW64\msctf.dll pool: 0xffff94895aa15a80 | file object: 0xffff94895aa15b00 | offsetby: 0x80 \Windows\SysWOW64\gdi32full.dll pool: 0xffff94895aa15c10 | file object: 0xffff94895aa15c90 | offsetby: 0x80 \Windows\SysWOW64\kernel.appcore.dll pool: 0xffff94895aa15da0 | file object: 0xffff94895aa15e20 | offsetby: 0x80 \Windows\SysWOW64\cryptbase.dll pool: 0xffff94895aa160c0 | file object: 0xffff94895aa16140 | offsetby: 0x80 \Windows\SysWOW64\KernelBase.dll pool: 0xffff94895aa16250 | file object: 0xffff94895aa162d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa163e0 | file object: 0xffff94895aa16460 | offsetby: 0x80 \Windows\System32\config\SOFTWARE pool: 0xffff94895aa16570 | file object: 0xffff94895aa165f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa16700 | file object: 0xffff94895aa16780 | offsetby: 0x80 \Windows\System32\config\SYSTEM.LOG1 pool: 0xffff94895aa16890 | file object: 0xffff94895aa16910 | offsetby: 0x80 \Windows\System32\config\SOFTWARE.LOG1 pool: 0xffff94895aa16a20 | file object: 0xffff94895aa16aa0 | offsetby: 0x80 \$Directory pool: 0xffff94895aa16bb0 | file object: 0xffff94895aa16c30 | offsetby: 0x80 \Windows\System32\config\SOFTWARE.LOG2 pool: 0xffff94895aa16d40 | file object: 0xffff94895aa16dc0 | offsetby: 0x80 \Windows\bootstat.dat pool: 0xffff94895aa1b050 | file object: 0xffff94895aa1b0d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa1b1e0 | file object: 0xffff94895aa1b260 | offsetby: 0x80 \$Directory pool: 0xffff94895aa1b370 | file object: 0xffff94895aa1b3f0 | offsetby: 0x80 \Windows\System32\config\SAM pool: 0xffff94895aa1b500 | file object: 0xffff94895aa1b580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa1b690 | file object: 0xffff94895aa1b710 | offsetby: 0x80 \$Directory pool: 0xffff94895aa1b820 | file object: 0xffff94895aa1b8a0 | offsetby: 0x80 \Windows\bootstat.dat pool: 0xffff94895aa1b9b0 | file object: 0xffff94895aa1ba30 | offsetby: 0x80 \Windows\System32\config\SAM.LOG1 pool: 0xffff94895aa1bb40 | file object: 0xffff94895aa1bbc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895aa1bcd0 | file object: 0xffff94895aa1bd50 | offsetby: 0x80 \Boot\BCD pool: 0xffff94895aa1be60 | file object: 0xffff94895aa1bee0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895aa1c180 | file object: 0xffff94895aa1c200 | offsetby: 0x80 \Windows\System32\config\SECURITY pool: 0xffff94895aa1c310 | file object: 0xffff94895aa1c390 | offsetby: 0x80 \Windows\System32\en-US\user32.dll.mui pool: 0xffff94895aa1c4a0 | file object: 0xffff94895aa1c520 | offsetby: 0x80 \swapfile.sys pool: 0xffff94895aa1c630 | file object: 0xffff94895aa1c6b0 | offsetby: 0x80 \Windows\System32\config\DEFAULT.LOG2 pool: 0xffff94895aa1c7c0 | file object: 0xffff94895aa1c840 | offsetby: 0x80 \Windows\System32\win32kfull.sys pool: 0xffff94895aa1c950 | file object: 0xffff94895aa1c9d0 | offsetby: 0x80 \$Directory pool: 0xffff94895aa1cae0 | file object: 0xffff94895aa1cb60 | offsetby: 0x80 \Windows\System32\config\SECURITY.LOG2 pool: 0xffff94895aa1cc70 | file object: 0xffff94895aa1ccf0 | offsetby: 0x80 \Windows\System32\win32kbase.sys pool: 0xffff94895aa1ce00 | file object: 0xffff94895aa1ce80 | offsetby: 0x80 \pagefile.sys pool: 0xffff94895aa1d120 | file object: 0xffff94895aa1d1a0 | offsetby: 0x80 \Windows\System32\config\DEFAULT.LOG1 pool: 0xffff94895aa1d2b0 | file object: 0xffff94895aa1d330 | offsetby: 0x80 \Windows\System32\win32k.sys pool: 0xffff94895aa1d440 | file object: 0xffff94895aa1d4c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa1d5d0 | file object: 0xffff94895aa1d650 | offsetby: 0x80 \Windows\System32\en-US\win32kbase.sys.mui pool: 0xffff94895aa1d760 | file object: 0xffff94895aa1d7e0 | offsetby: 0x80 \$Directory pool: 0xffff94895aa1d8f0 | file object: 0xffff94895aa1d970 | offsetby: 0x80 \Windows\System32\config\SECURITY.LOG1 pool: 0xffff94895aa1da80 | file object: 0xffff94895aa1db00 | offsetby: 0x80 \Windows\System32\config\SAM.LOG2 pool: 0xffff94895aa1dc10 | file object: 0xffff94895aa1dc90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa1dda0 | file object: 0xffff94895aa1de20 | offsetby: 0x80 \Windows\System32\config\DEFAULT pool: 0xffff94895aa1e0c0 | file object: 0xffff94895aa1e140 | offsetby: 0x80 \Boot\BCD.LOG pool: 0xffff94895aa1e250 | file object: 0xffff94895aa1e2d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895aa1e3e0 | file object: 0xffff94895aa1e460 | offsetby: 0x80 \Windows\System32\winsrv.dll pool: 0xffff94895aa1e570 | file object: 0xffff94895aa1e5f0 | offsetby: 0x80 \Windows\System32\csrsrv.dll pool: 0xffff94895aa1e700 | file object: 0xffff94895aa1e780 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895aa1e890 | file object: 0xffff94895aa1e910 | offsetby: 0x80 \Windows\System32\basesrv.dll pool: 0xffff94895aa1ea20 | file object: 0xffff94895aa1eaa0 | offsetby: 0x80 \$Directory pool: 0xffff94895aa1ebb0 | file object: 0xffff94895aa1ec30 | offsetby: 0x80 \Windows\System32\csrss.exe pool: 0xffff94895aa1ed40 | file object: 0xffff94895aa1edc0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ab761e0 | file object: 0xffff94895ab76260 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab76370 | file object: 0xffff94895ab763f0 | offsetby: 0x80 \Windows\System32\wininitext.dll pool: 0xffff94895ab76500 | file object: 0xffff94895ab76580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab76690 | file object: 0xffff94895ab76710 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab76820 | file object: 0xffff94895ab768a0 | offsetby: 0x80 \Windows\System32\bcastdvruserservice.dll pool: 0xffff94895ab769b0 | file object: 0xffff94895ab76a30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab76b40 | file object: 0xffff94895ab76bc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab76cd0 | file object: 0xffff94895ab76d50 | offsetby: 0x80 \Windows\System32\cdd.dll pool: 0xffff94895ab76e60 | file object: 0xffff94895ab76ee0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab77180 | file object: 0xffff94895ab77200 | offsetby: 0x80 \Windows\System32\wininit.exe pool: 0xffff94895ab77310 | file object: 0xffff94895ab77390 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ab774a0 | file object: 0xffff94895ab77520 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab77630 | file object: 0xffff94895ab776b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab777c0 | file object: 0xffff94895ab77840 | offsetby: 0x80 \Windows\System32\slc.dll pool: 0xffff94895ab77950 | file object: 0xffff94895ab779d0 | offsetby: 0x80 \Windows\System32\en-US\csrss.exe.mui pool: 0xffff94895ab77ae0 | file object: 0xffff94895ab77b60 | offsetby: 0x80 \Windows\System32\umstartup.etl pool: 0xffff94895ab77c70 | file object: 0xffff94895ab77cf0 | offsetby: 0x80 \Windows\System32\winlogon.exe pool: 0xffff94895ab77e00 | file object: 0xffff94895ab77e80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab78120 | file object: 0xffff94895ab781a0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ab782b0 | file object: 0xffff94895ab78330 | offsetby: 0x80 \Windows\System32\csrss.exe pool: 0xffff94895ab78440 | file object: 0xffff94895ab784c0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ab785d0 | file object: 0xffff94895ab78650 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab78760 | file object: 0xffff94895ab787e0 | offsetby: 0x80 \Windows\System32\en-US\winsrv.dll.mui pool: 0xffff94895ab788f0 | file object: 0xffff94895ab78970 | offsetby: 0x80 \Windows\System32\drivers\dxgmms2.sys pool: 0xffff94895ab78c10 | file object: 0xffff94895ab78c90 | offsetby: 0x80 \Windows\System32\winsrvext.dll pool: 0xffff94895ab78da0 | file object: 0xffff94895ab78e20 | offsetby: 0x80 \Windows\System32\FNTCACHE.DAT pool: 0xffff94895ab790c0 | file object: 0xffff94895ab79140 | offsetby: 0x80 \Windows\System32\sxssrv.dll pool: 0xffff94895ab79250 | file object: 0xffff94895ab792d0 | offsetby: 0x80 \Windows\System32\KBDUS.DLL pool: 0xffff94895ab793e0 | file object: 0xffff94895ab79460 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab79570 | file object: 0xffff94895ab795f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ab79700 | file object: 0xffff94895ab79780 | offsetby: 0x80 \Windows\System32\sspicli.dll pool: 0xffff94895ab79890 | file object: 0xffff94895ab79910 | offsetby: 0x80 \Windows\System32\userenv.dll pool: 0xffff94895ab79a20 | file object: 0xffff94895ab79aa0 | offsetby: 0x80 \Windows\System32\en-US\wininit.exe.mui pool: 0xffff94895ab79bb0 | file object: 0xffff94895ab79c30 | offsetby: 0x80 \Windows\System32\imm32.dll pool: 0xffff94895ab79d40 | file object: 0xffff94895ab79dc0 | offsetby: 0x80 \Windows\System32\en-US\winlogon.exe.mui pool: 0xffff94895ac441b0 | file object: 0xffff94895ac44210 | offsetby: 0x60 \Windows\System32\drivers\tbs.sys pool: 0xffff94895ac44320 | file object: 0xffff94895ac44380 | offsetby: 0x60 \Windows\System32\drivers\beep.sys pool: 0xffff94895ac44a50 | file object: 0xffff94895ac44ab0 | offsetby: 0x60 \Windows\System32\drivers\watchdog.sys pool: 0xffff94895ac44bc0 | file object: 0xffff94895ac44c20 | offsetby: 0x60 \Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys pool: 0xffff94895ac44d30 | file object: 0xffff94895ac44d90 | offsetby: 0x60 \$Directory pool: 0xffff94895ac455d0 | file object: 0xffff94895ac45630 | offsetby: 0x60 \Windows\System32\drivers\dxgkrnl.sys pool: 0xffff94895ac45a20 | file object: 0xffff94895ac45a80 | offsetby: 0x60 \Windows\System32\drivers\null.sys pool: 0xffff94895ac66330 | file object: 0xffff94895ac66390 | offsetby: 0x60 \$Directory pool: 0xffff94895ac66610 | file object: 0xffff94895ac66670 | offsetby: 0x60 \$Directory pool: 0xffff94895ac66780 | file object: 0xffff94895ac667e0 | offsetby: 0x60 \$Directory pool: 0xffff94895ac66a60 | file object: 0xffff94895ac66ac0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac67020 | file object: 0xffff94895ac67080 | offsetby: 0x60 \$Directory pool: 0xffff94895ac67190 | file object: 0xffff94895ac671f0 | offsetby: 0x60 \$Directory pool: 0xffff94895ac67300 | file object: 0xffff94895ac67360 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac67750 | file object: 0xffff94895ac677b0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac678c0 | file object: 0xffff94895ac67920 | offsetby: 0x60 \$Directory pool: 0xffff94895ac67a30 | file object: 0xffff94895ac67a90 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac67ba0 | file object: 0xffff94895ac67c00 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac68160 | file object: 0xffff94895ac681c0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac68440 | file object: 0xffff94895ac684a0 | offsetby: 0x60 \$Directory pool: 0xffff94895ac68720 | file object: 0xffff94895ac68780 | offsetby: 0x60 \$Directory pool: 0xffff94895ac68890 | file object: 0xffff94895ac688f0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ac68b70 | file object: 0xffff94895ac68bd0 | offsetby: 0x60 \$Directory pool: 0xffff94895ac68ce0 | file object: 0xffff94895ac68d40 | offsetby: 0x60 \$Directory pool: 0xffff94895ac692a0 | file object: 0xffff94895ac69300 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ac69410 | file object: 0xffff94895ac69470 | offsetby: 0x60 \Windows\System32\drivers\HdAudio.sys pool: 0xffff94895ac69580 | file object: 0xffff94895ac695e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ac696f0 | file object: 0xffff94895ac69750 | offsetby: 0x60 \Windows\System32\drivers\usbhub.sys pool: 0xffff94895ac69860 | file object: 0xffff94895ac698c0 | offsetby: 0x60 \Windows\System32\drivers\usbd.sys pool: 0xffff94895ac69cb0 | file object: 0xffff94895ac69d10 | offsetby: 0x60 \Windows\System32\drivers\ksthunk.sys pool: 0xffff94895b0bc040 | file object: 0xffff94895b0bc0c0 | offsetby: 0x80 \Windows\System32\oleaut32.dll pool: 0xffff94895b0bc1d0 | file object: 0xffff94895b0bc250 | offsetby: 0x80 \Windows\System32\msvcrt.dll pool: 0xffff94895b0bc360 | file object: 0xffff94895b0bc3e0 | offsetby: 0x80 \Windows\System32\combase.dll pool: 0xffff94895b0bc4f0 | file object: 0xffff94895b0bc570 | offsetby: 0x80 \Windows\System32\rpcrt4.dll pool: 0xffff94895b0bc680 | file object: 0xffff94895b0bc700 | offsetby: 0x80 \Windows\System32\clbcatq.dll pool: 0xffff94895b0bc810 | file object: 0xffff94895b0bc890 | offsetby: 0x80 \Windows\System32\msvcp_win.dll pool: 0xffff94895b0bc9a0 | file object: 0xffff94895b0bca20 | offsetby: 0x80 \Windows\System32\imagehlp.dll pool: 0xffff94895b0bcb30 | file object: 0xffff94895b0bcbb0 | offsetby: 0x80 \Windows\System32\cfgmgr32.dll pool: 0xffff94895b0bccc0 | file object: 0xffff94895b0bcd40 | offsetby: 0x80 \Windows\System32\gdi32full.dll pool: 0xffff94895b0bce50 | file object: 0xffff94895b0bced0 | offsetby: 0x80 \Windows\System32\ucrtbase.dll pool: 0xffff94895b0bd170 | file object: 0xffff94895b0bd1f0 | offsetby: 0x80 \Windows\System32\user32.dll pool: 0xffff94895b0bd300 | file object: 0xffff94895b0bd380 | offsetby: 0x80 \Windows\System32\windows.storage.dll pool: 0xffff94895b0bd490 | file object: 0xffff94895b0bd510 | offsetby: 0x80 \Windows\System32\ole32.dll pool: 0xffff94895b0bd620 | file object: 0xffff94895b0bd6a0 | offsetby: 0x80 \Windows\System32\coml2.dll pool: 0xffff94895b0bd7b0 | file object: 0xffff94895b0bd830 | offsetby: 0x80 \Windows\System32\psapi.dll pool: 0xffff94895b0bd940 | file object: 0xffff94895b0bd9c0 | offsetby: 0x80 \Windows\System32\bcryptprimitives.dll pool: 0xffff94895b0bdad0 | file object: 0xffff94895b0bdb50 | offsetby: 0x80 \Windows\System32\crypt32.dll pool: 0xffff94895b0bdc60 | file object: 0xffff94895b0bdce0 | offsetby: 0x80 \Windows\System32\comdlg32.dll pool: 0xffff94895b0bddf0 | file object: 0xffff94895b0bde70 | offsetby: 0x80 \Windows\System32\advapi32.dll pool: 0xffff94895b621cc0 | file object: 0xffff94895b621d40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895b6227b0 | file object: 0xffff94895b622830 | offsetby: 0x80 \Windows pool: 0xffff94895b622df0 | file object: 0xffff94895b622e70 | offsetby: 0x80 \Windows\System32\config\SYSTEM pool: 0xffff94895b62e330 | file object: 0xffff94895b62e390 | offsetby: 0x60 \Windows\System32\drivers\Ndu.sys pool: 0xffff94895b62e4a0 | file object: 0xffff94895b62e500 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b62e780 | file object: 0xffff94895b62e7e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b62ea60 | file object: 0xffff94895b62eac0 | offsetby: 0x60 \Windows\System32\drivers\mouhid.sys pool: 0xffff94895b62ebd0 | file object: 0xffff94895b62ec30 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b62f190 | file object: 0xffff94895b62f1f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b62f470 | file object: 0xffff94895b62f4d0 | offsetby: 0x60 \Windows\System32\drivers\PEAuth.sys pool: 0xffff94895b62f5e0 | file object: 0xffff94895b62f640 | offsetby: 0x60 \Windows\System32\drivers\hidclass.sys pool: 0xffff94895b62f8c0 | file object: 0xffff94895b62f920 | offsetby: 0x60 \Windows\apppatch\drvmain.sdb pool: 0xffff94895b62fba0 | file object: 0xffff94895b62fc00 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b630160 | file object: 0xffff94895b6301c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895b630440 | file object: 0xffff94895b6304a0 | offsetby: 0x60 \Windows\System32\drivers\hidparse.sys pool: 0xffff94895b630a00 | file object: 0xffff94895b630a60 | offsetby: 0x60 \Windows\System32\drivers\mmcss.sys pool: 0xffff94895b630ce0 | file object: 0xffff94895b630d40 | offsetby: 0x60 \Windows\System32\drivers\hidusb.sys pool: 0xffff94895ba91030 | file object: 0xffff94895ba91090 | offsetby: 0x60 \Windows\System32\drivers\tcpipreg.sys pool: 0xffff94895ba925c0 | file object: 0xffff94895ba92620 | offsetby: 0x60 \Windows\System32\drivers\wd\WdFilter.sys pool: 0xffff94895bca1040 | file object: 0xffff94895bca10c0 | offsetby: 0x80 \Windows\System32\Wldap32.dll pool: 0xffff94895bca11d0 | file object: 0xffff94895bca1250 | offsetby: 0x80 \Windows\System32\wow64win.dll pool: 0xffff94895bca1360 | file object: 0xffff94895bca13e0 | offsetby: 0x80 \Windows\System32\config\SYSTEM.LOG2 pool: 0xffff94895bca14f0 | file object: 0xffff94895bca1570 | offsetby: 0x80 \Windows\System32\sechost.dll pool: 0xffff94895bca1680 | file object: 0xffff94895bca1700 | offsetby: 0x80 \Windows\System32\wow64cpu.dll pool: 0xffff94895bca1810 | file object: 0xffff94895bca1890 | offsetby: 0x80 \Windows\System32\GdiPlus.dll pool: 0xffff94895bca19a0 | file object: 0xffff94895bca1a20 | offsetby: 0x80 \Windows\System32\setupapi.dll pool: 0xffff94895bca1b30 | file object: 0xffff94895bca1bb0 | offsetby: 0x80 \Windows\System32\nsi.dll pool: 0xffff94895bca1cc0 | file object: 0xffff94895bca1d40 | offsetby: 0x80 \Windows\System32\shell32.dll pool: 0xffff94895bca1e50 | file object: 0xffff94895bca1ed0 | offsetby: 0x80 \Windows\System32\SHCore.dll pool: 0xffff94895bca2170 | file object: 0xffff94895bca21f0 | offsetby: 0x80 \Windows\System32\imm32.dll pool: 0xffff94895bca2300 | file object: 0xffff94895bca2380 | offsetby: 0x80 \Windows\System32\kernel32.dll pool: 0xffff94895bca2490 | file object: 0xffff94895bca2510 | offsetby: 0x80 \Windows\System32\normaliz.dll pool: 0xffff94895bca2620 | file object: 0xffff94895bca26a0 | offsetby: 0x80 \Windows\System32\ws2_32.dll pool: 0xffff94895bca27b0 | file object: 0xffff94895bca2830 | offsetby: 0x80 \Windows\System32\wow64.dll pool: 0xffff94895bca2940 | file object: 0xffff94895bca29c0 | offsetby: 0x80 \Windows\System32\shlwapi.dll pool: 0xffff94895bca2ad0 | file object: 0xffff94895bca2b50 | offsetby: 0x80 \Windows\System32\gdi32.dll pool: 0xffff94895bca2c60 | file object: 0xffff94895bca2ce0 | offsetby: 0x80 \Windows\System32\msctf.dll pool: 0xffff94895bca2df0 | file object: 0xffff94895bca2e70 | offsetby: 0x80 \Windows\System32\difxapi.dll pool: 0xffff94895bca3040 | file object: 0xffff94895bca30c0 | offsetby: 0x80 \Windows\System32\umpdc.dll pool: 0xffff94895bca31d0 | file object: 0xffff94895bca3250 | offsetby: 0x80 \Windows\System32\cryptsp.dll pool: 0xffff94895bca3360 | file object: 0xffff94895bca33e0 | offsetby: 0x80 \Windows\SysWOW64\msvcrt.dll pool: 0xffff94895bca34f0 | file object: 0xffff94895bca3570 | offsetby: 0x80 \Windows\System32\msasn1.dll pool: 0xffff94895bca3680 | file object: 0xffff94895bca3700 | offsetby: 0x80 \Windows\System32\bcrypt.dll pool: 0xffff94895bca3810 | file object: 0xffff94895bca3890 | offsetby: 0x80 \Windows\System32\powrprof.dll pool: 0xffff94895bca39a0 | file object: 0xffff94895bca3a20 | offsetby: 0x80 \Windows\SysWOW64\msasn1.dll pool: 0xffff94895bca3b30 | file object: 0xffff94895bca3bb0 | offsetby: 0x80 \Windows\SysWOW64\sechost.dll pool: 0xffff94895bca3cc0 | file object: 0xffff94895bca3d40 | offsetby: 0x80 \Windows\SysWOW64\bcrypt.dll pool: 0xffff94895bca3e50 | file object: 0xffff94895bca3ed0 | offsetby: 0x80 \Windows\SysWOW64\normaliz.dll pool: 0xffff94895bca4170 | file object: 0xffff94895bca41f0 | offsetby: 0x80 \Windows\System32\KernelBase.dll pool: 0xffff94895bca4300 | file object: 0xffff94895bca4380 | offsetby: 0x80 \Windows\System32\comctl32.dll pool: 0xffff94895bca4490 | file object: 0xffff94895bca4510 | offsetby: 0x80 \Windows\System32\profapi.dll pool: 0xffff94895bca4620 | file object: 0xffff94895bca46a0 | offsetby: 0x80 \Windows\SysWOW64\clbcatq.dll pool: 0xffff94895bca47b0 | file object: 0xffff94895bca4830 | offsetby: 0x80 \Windows\System32\kernel.appcore.dll pool: 0xffff94895bca4940 | file object: 0xffff94895bca49c0 | offsetby: 0x80 \Windows\System32\win32u.dll pool: 0xffff94895bca4ad0 | file object: 0xffff94895bca4b50 | offsetby: 0x80 \Windows\SysWOW64\rpcrt4.dll pool: 0xffff94895bca4c60 | file object: 0xffff94895bca4ce0 | offsetby: 0x80 \Windows\SysWOW64\psapi.dll pool: 0xffff94895bca4df0 | file object: 0xffff94895bca4e70 | offsetby: 0x80 \Windows\System32\wintrust.dll pool: 0xffff94895bca5040 | file object: 0xffff94895bca50c0 | offsetby: 0x80 \Windows\SysWOW64\SHCore.dll pool: 0xffff94895bca51d0 | file object: 0xffff94895bca5250 | offsetby: 0x80 \Windows\SysWOW64\umpdc.dll pool: 0xffff94895bca5360 | file object: 0xffff94895bca53e0 | offsetby: 0x80 \Windows\SysWOW64\comdlg32.dll pool: 0xffff94895bca54f0 | file object: 0xffff94895bca5570 | offsetby: 0x80 \Windows\SysWOW64\comctl32.dll pool: 0xffff94895bca5680 | file object: 0xffff94895bca5700 | offsetby: 0x80 \Windows\SysWOW64\ole32.dll pool: 0xffff94895bca5810 | file object: 0xffff94895bca5890 | offsetby: 0x80 \Windows\SysWOW64\crypt32.dll pool: 0xffff94895bca59a0 | file object: 0xffff94895bca5a20 | offsetby: 0x80 \Windows\SysWOW64\oleaut32.dll pool: 0xffff94895bca5b30 | file object: 0xffff94895bca5bb0 | offsetby: 0x80 \Windows\SysWOW64\kernel32.dll pool: 0xffff94895bca5cc0 | file object: 0xffff94895bca5d40 | offsetby: 0x80 \Windows\SysWOW64\nsi.dll pool: 0xffff94895bca5e50 | file object: 0xffff94895bca5ed0 | offsetby: 0x80 \Windows\SysWOW64\combase.dll pool: 0xffff94895bca6170 | file object: 0xffff94895bca61f0 | offsetby: 0x80 \Windows\SysWOW64\imm32.dll pool: 0xffff94895bca6300 | file object: 0xffff94895bca6380 | offsetby: 0x80 \Windows\SysWOW64\cfgmgr32.dll pool: 0xffff94895bca6490 | file object: 0xffff94895bca6510 | offsetby: 0x80 \Windows\SysWOW64\difxapi.dll pool: 0xffff94895bca6620 | file object: 0xffff94895bca66a0 | offsetby: 0x80 \Windows\SysWOW64\bcryptprimitives.dll pool: 0xffff94895bca67b0 | file object: 0xffff94895bca6830 | offsetby: 0x80 \Windows\SysWOW64\setupapi.dll pool: 0xffff94895bca6940 | file object: 0xffff94895bca69c0 | offsetby: 0x80 \Windows\SysWOW64\powrprof.dll pool: 0xffff94895bca6ad0 | file object: 0xffff94895bca6b50 | offsetby: 0x80 \Windows\SysWOW64\windows.storage.dll pool: 0xffff94895bca6c60 | file object: 0xffff94895bca6ce0 | offsetby: 0x80 \Windows\SysWOW64\wintrust.dll pool: 0xffff94895bca6df0 | file object: 0xffff94895bca6e70 | offsetby: 0x80 \Windows\SysWOW64\GdiPlus.dll pool: 0xffff94895bde5050 | file object: 0xffff94895bde50d0 | offsetby: 0x80 \Windows\System32\en-US\user32.dll.mui pool: 0xffff94895bde51e0 | file object: 0xffff94895bde5260 | offsetby: 0x80 \Windows\Cursors\aero_ns.cur pool: 0xffff94895bde5370 | file object: 0xffff94895bde53f0 | offsetby: 0x80 \Windows\Cursors\aero_busy.ani pool: 0xffff94895bde5500 | file object: 0xffff94895bde5580 | offsetby: 0x80 \Windows\System32\services.exe pool: 0xffff94895bde5690 | file object: 0xffff94895bde5710 | offsetby: 0x80 \Windows\System32\sxs.dll pool: 0xffff94895bde5820 | file object: 0xffff94895bde58a0 | offsetby: 0x80 \Windows\Cursors\aero_ew.cur pool: 0xffff94895bde59b0 | file object: 0xffff94895bde5a30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895bde5b40 | file object: 0xffff94895bde5bc0 | offsetby: 0x80 \Windows\Cursors\aero_pen.cur pool: 0xffff94895bde5cd0 | file object: 0xffff94895bde5d50 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_17aba8d26da530da.manifest pool: 0xffff94895bde5e60 | file object: 0xffff94895bde5ee0 | offsetby: 0x80 \Windows\Cursors\aero_unavail.cur pool: 0xffff94895bde6180 | file object: 0xffff94895bde6200 | offsetby: 0x80 \Windows\Cursors\aero_link.cur pool: 0xffff94895bde6310 | file object: 0xffff94895bde6390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895bde64a0 | file object: 0xffff94895bde6520 | offsetby: 0x80 \Windows\Cursors\aero_nwse.cur pool: 0xffff94895bde6630 | file object: 0xffff94895bde66b0 | offsetby: 0x80 \Windows\Cursors\aero_nesw.cur pool: 0xffff94895bde67c0 | file object: 0xffff94895bde6840 | offsetby: 0x80 \Windows\Cursors\aero_up.cur pool: 0xffff94895bde6950 | file object: 0xffff94895bde69d0 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.18362.752_none_ee5cf8d0cfa9a513.manifest pool: 0xffff94895bde6ae0 | file object: 0xffff94895bde6b60 | offsetby: 0x80 \$Directory pool: 0xffff94895bde6c70 | file object: 0xffff94895bde6cf0 | offsetby: 0x80 \$Directory pool: 0xffff94895bde6e00 | file object: 0xffff94895bde6e80 | offsetby: 0x80 \Windows\Cursors\aero_working.ani pool: 0xffff94895bde7120 | file object: 0xffff94895bde71a0 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.18362.752_none_984c656d415c1334.manifest pool: 0xffff94895bde72b0 | file object: 0xffff94895bde7330 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895bde7440 | file object: 0xffff94895bde74c0 | offsetby: 0x80 \Windows\Cursors\aero_arrow.cur pool: 0xffff94895bde75d0 | file object: 0xffff94895bde7650 | offsetby: 0x80 \Windows\Cursors\aero_move.cur pool: 0xffff94895bde7760 | file object: 0xffff94895bde77e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895bde78f0 | file object: 0xffff94895bde7970 | offsetby: 0x80 \$Directory pool: 0xffff94895bde7a80 | file object: 0xffff94895bde7b00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895bde7c10 | file object: 0xffff94895bde7c90 | offsetby: 0x80 \Windows\Cursors\aero_helpsel.cur pool: 0xffff94895bde7da0 | file object: 0xffff94895bde7e20 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_2a285cc246691ef5.manifest pool: 0xffff94895bde80c0 | file object: 0xffff94895bde8140 | offsetby: 0x80 \Windows\System32\KBDUS.DLL pool: 0xffff94895bde8250 | file object: 0xffff94895bde82d0 | offsetby: 0x80 \Windows\System32\EventAggregation.dll pool: 0xffff94895bde83e0 | file object: 0xffff94895bde8460 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895bde8570 | file object: 0xffff94895bde85f0 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.752_en-us_4033a5a7730f50e2.manifest pool: 0xffff94895bde8700 | file object: 0xffff94895bde8780 | offsetby: 0x80 \Windows\System32\lsass.exe pool: 0xffff94895bde8890 | file object: 0xffff94895bde8910 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895bde8a20 | file object: 0xffff94895bde8aa0 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.18362.752_none_41c3b6a0a0662d48.manifest pool: 0xffff94895bde8bb0 | file object: 0xffff94895bde8c30 | offsetby: 0x80 \Windows\System32\devobj.dll pool: 0xffff94895bde8d40 | file object: 0xffff94895bde8dc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca13060 | file object: 0xffff94895ca130e0 | offsetby: 0x80 \Windows\System32\lsasrv.dll pool: 0xffff94895ca131f0 | file object: 0xffff94895ca13270 | offsetby: 0x80 \Windows\System32\KerbClientShared.dll pool: 0xffff94895ca13380 | file object: 0xffff94895ca13400 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca13510 | file object: 0xffff94895ca13590 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ca136a0 | file object: 0xffff94895ca13720 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca13830 | file object: 0xffff94895ca138b0 | offsetby: 0x80 \Windows\System32\en-US\bcastdvruserservice.dll.mui pool: 0xffff94895ca139c0 | file object: 0xffff94895ca13a40 | offsetby: 0x80 \Windows\System32\ncrypt.dll pool: 0xffff94895ca13b50 | file object: 0xffff94895ca13bd0 | offsetby: 0x80 \Windows\System32\netprovfw.dll pool: 0xffff94895ca13ce0 | file object: 0xffff94895ca13d60 | offsetby: 0x80 \Windows\System32\cryptdll.dll pool: 0xffff94895ca13e70 | file object: 0xffff94895ca13ef0 | offsetby: 0x80 \Windows\System32\netlogon.dll pool: 0xffff94895ca14000 | file object: 0xffff94895ca14080 | offsetby: 0x80 \Windows\System32\winsta.dll pool: 0xffff94895ca14190 | file object: 0xffff94895ca14210 | offsetby: 0x80 \Windows\Globalization\Sorting\SortDefault.nls pool: 0xffff94895ca14320 | file object: 0xffff94895ca143a0 | offsetby: 0x80 \Windows\System32\cryptbase.dll pool: 0xffff94895ca144b0 | file object: 0xffff94895ca14530 | offsetby: 0x80 \Windows\System32\gmsaclient.dll pool: 0xffff94895ca14640 | file object: 0xffff94895ca146c0 | offsetby: 0x80 \Windows\System32\logoncli.dll pool: 0xffff94895ca147d0 | file object: 0xffff94895ca14850 | offsetby: 0x80 \Windows\System32\joinutil.dll pool: 0xffff94895ca14960 | file object: 0xffff94895ca149e0 | offsetby: 0x80 \Windows\System32\mswsock.dll pool: 0xffff94895ca14af0 | file object: 0xffff94895ca14b70 | offsetby: 0x80 \Windows\System32\msv1_0.dll pool: 0xffff94895ca14c80 | file object: 0xffff94895ca14d00 | offsetby: 0x80 \Windows\System32\dnsapi.dll pool: 0xffff94895ca14e10 | file object: 0xffff94895ca14e90 | offsetby: 0x80 \Windows\System32\negoexts.dll pool: 0xffff94895ca15130 | file object: 0xffff94895ca151b0 | offsetby: 0x80 \Windows\System32\samsrv.dll pool: 0xffff94895ca152c0 | file object: 0xffff94895ca15340 | offsetby: 0x80 \Windows\System32\wldp.dll pool: 0xffff94895ca15450 | file object: 0xffff94895ca154d0 | offsetby: 0x80 \Windows\System32\kerberos.dll pool: 0xffff94895ca155e0 | file object: 0xffff94895ca15660 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca15770 | file object: 0xffff94895ca157f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca15900 | file object: 0xffff94895ca15980 | offsetby: 0x80 \Windows\System32\msprivs.dll pool: 0xffff94895ca15a90 | file object: 0xffff94895ca15b10 | offsetby: 0x80 \Windows\System32\ntasn1.dll pool: 0xffff94895ca15c20 | file object: 0xffff94895ca15ca0 | offsetby: 0x80 \Windows\System32\NtlmShared.dll pool: 0xffff94895ca15db0 | file object: 0xffff94895ca15e30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca160d0 | file object: 0xffff94895ca16150 | offsetby: 0x80 \Windows\System32\en-US\lsasrv.dll.mui pool: 0xffff94895ca16260 | file object: 0xffff94895ca162e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ca163f0 | file object: 0xffff94895ca16470 | offsetby: 0x80 \Windows\System32\dpapi.dll pool: 0xffff94895ca16580 | file object: 0xffff94895ca16600 | offsetby: 0x80 \Windows\System32\schannel.dll pool: 0xffff94895ca16710 | file object: 0xffff94895ca16790 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca168a0 | file object: 0xffff94895ca16920 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca16a30 | file object: 0xffff94895ca16ab0 | offsetby: 0x80 \Windows\System32\shutdownux.dll pool: 0xffff94895ca16bc0 | file object: 0xffff94895ca16c40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca16d50 | file object: 0xffff94895ca16dd0 | offsetby: 0x80 \Windows\System32\efslsaext.dll pool: 0xffff94895ca17070 | file object: 0xffff94895ca170f0 | offsetby: 0x80 \Windows\System32\IPHLPAPI.DLL pool: 0xffff94895ca17200 | file object: 0xffff94895ca17280 | offsetby: 0x80 \Windows\System32\sspisrv.dll pool: 0xffff94895ca17390 | file object: 0xffff94895ca17410 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca17520 | file object: 0xffff94895ca175a0 | offsetby: 0x80 \Windows\System32\dpapisrv.dll pool: 0xffff94895ca176b0 | file object: 0xffff94895ca17730 | offsetby: 0x80 \Windows\System32\TSpkg.dll pool: 0xffff94895ca17840 | file object: 0xffff94895ca178c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca179d0 | file object: 0xffff94895ca17a50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ca17b60 | file object: 0xffff94895ca17be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca17cf0 | file object: 0xffff94895ca17d70 | offsetby: 0x80 \Windows\System32\wdigest.dll pool: 0xffff94895ca18010 | file object: 0xffff94895ca18090 | offsetby: 0x80 \Windows\System32\netutils.dll pool: 0xffff94895ca181a0 | file object: 0xffff94895ca18220 | offsetby: 0x80 \Windows\System32\rsaenh.dll pool: 0xffff94895ca18330 | file object: 0xffff94895ca183b0 | offsetby: 0x80 \Windows\System32\SshdPinAuthLsa.dll pool: 0xffff94895ca184c0 | file object: 0xffff94895ca18540 | offsetby: 0x80 \Windows\System32\credssp.dll pool: 0xffff94895ca18650 | file object: 0xffff94895ca186d0 | offsetby: 0x80 \Windows\System32\Microsoft\Protect\S-1-5-18\User\aa3c15f1-fa3c-45c5-91c0-8a6cee86f69b pool: 0xffff94895ca187e0 | file object: 0xffff94895ca18860 | offsetby: 0x80 \$Directory pool: 0xffff94895ca18970 | file object: 0xffff94895ca189f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ca18b00 | file object: 0xffff94895ca18b80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ca18c90 | file object: 0xffff94895ca18d10 | offsetby: 0x80 \Windows\System32\MicrosoftAccountCloudAP.dll pool: 0xffff94895ca18e20 | file object: 0xffff94895ca18ea0 | offsetby: 0x80 \$Directory pool: 0xffff94895ca19140 | file object: 0xffff94895ca191c0 | offsetby: 0x80 \Windows\System32\pku2u.dll pool: 0xffff94895ca192d0 | file object: 0xffff94895ca19350 | offsetby: 0x80 \Windows\System32\cloudAP.dll pool: 0xffff94895ca19460 | file object: 0xffff94895ca194e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca195f0 | file object: 0xffff94895ca19670 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca19780 | file object: 0xffff94895ca19800 | offsetby: 0x80 \Windows\System32\fontdrvhost.exe pool: 0xffff94895ca19910 | file object: 0xffff94895ca19990 | offsetby: 0x80 \Windows\System32\profext.dll pool: 0xffff94895ca19aa0 | file object: 0xffff94895ca19b20 | offsetby: 0x80 \Windows\System32\ntmarta.dll pool: 0xffff94895ca19c30 | file object: 0xffff94895ca19cb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ca19dc0 | file object: 0xffff94895ca19e40 | offsetby: 0x80 \$Directory pool: 0xffff94895ca1a0e0 | file object: 0xffff94895ca1a160 | offsetby: 0x80 \Windows\System32\scecli.dll pool: 0xffff94895ca1a270 | file object: 0xffff94895ca1a2f0 | offsetby: 0x80 \Windows\System32\fwbase.dll pool: 0xffff94895ca1a400 | file object: 0xffff94895ca1a480 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca1a590 | file object: 0xffff94895ca1a610 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca1a720 | file object: 0xffff94895ca1a7a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca1a8b0 | file object: 0xffff94895ca1a930 | offsetby: 0x80 \Windows\System32\kdcpw.dll pool: 0xffff94895ca1aa40 | file object: 0xffff94895ca1aac0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca1abd0 | file object: 0xffff94895ca1ac50 | offsetby: 0x80 \Windows\System32\fontdrvhost.exe pool: 0xffff94895ca1ad60 | file object: 0xffff94895ca1ade0 | offsetby: 0x80 \Windows\System32\FirewallAPI.dll pool: 0xffff94895ca7d060 | file object: 0xffff94895ca7d0e0 | offsetby: 0x80 \Windows\System32\authz.dll pool: 0xffff94895ca7d1f0 | file object: 0xffff94895ca7d270 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7d380 | file object: 0xffff94895ca7d400 | offsetby: 0x80 \Windows\Fonts\vgafix.fon pool: 0xffff94895ca7d510 | file object: 0xffff94895ca7d590 | offsetby: 0x80 \$Directory pool: 0xffff94895ca7d6a0 | file object: 0xffff94895ca7d720 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ca7d830 | file object: 0xffff94895ca7d8b0 | offsetby: 0x80 \Windows\Fonts\script.fon pool: 0xffff94895ca7d9c0 | file object: 0xffff94895ca7da40 | offsetby: 0x80 \Windows\Fonts\coure.fon pool: 0xffff94895ca7db50 | file object: 0xffff94895ca7dbd0 | offsetby: 0x80 \Windows\Fonts\modern.fon pool: 0xffff94895ca7dce0 | file object: 0xffff94895ca7dd60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7de70 | file object: 0xffff94895ca7def0 | offsetby: 0x80 \Windows\Fonts\serife.fon pool: 0xffff94895ca7e000 | file object: 0xffff94895ca7e080 | offsetby: 0x80 \Windows\Fonts\smalle.fon pool: 0xffff94895ca7e190 | file object: 0xffff94895ca7e210 | offsetby: 0x80 \Windows\Fonts\smallf.fon pool: 0xffff94895ca7e320 | file object: 0xffff94895ca7e3a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7e4b0 | file object: 0xffff94895ca7e530 | offsetby: 0x80 \Windows\System32\scesrv.dll pool: 0xffff94895ca7e640 | file object: 0xffff94895ca7e6c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7e7d0 | file object: 0xffff94895ca7e850 | offsetby: 0x80 \Windows\Fonts\vgasys.fon pool: 0xffff94895ca7e960 | file object: 0xffff94895ca7e9e0 | offsetby: 0x80 \Windows\Fonts\courf.fon pool: 0xffff94895ca7eaf0 | file object: 0xffff94895ca7eb70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7ec80 | file object: 0xffff94895ca7ed00 | offsetby: 0x80 \Windows\Fonts\sseriff.fon pool: 0xffff94895ca7ee10 | file object: 0xffff94895ca7ee90 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ca7f130 | file object: 0xffff94895ca7f1b0 | offsetby: 0x80 \Windows\Fonts\vgaoem.fon pool: 0xffff94895ca7f2c0 | file object: 0xffff94895ca7f340 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ca7f450 | file object: 0xffff94895ca7f4d0 | offsetby: 0x80 \Windows\System32\WUDFPlatform.dll pool: 0xffff94895ca7f5e0 | file object: 0xffff94895ca7f660 | offsetby: 0x80 \Windows\Fonts\roman.fon pool: 0xffff94895ca7f770 | file object: 0xffff94895ca7f7f0 | offsetby: 0x80 \Windows\Fonts\seriff.fon pool: 0xffff94895ca7f900 | file object: 0xffff94895ca7f980 | offsetby: 0x80 \Windows\Fonts\sserife.fon pool: 0xffff94895ca7fa90 | file object: 0xffff94895ca7fb10 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ca7fc20 | file object: 0xffff94895ca7fca0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca7fdb0 | file object: 0xffff94895ca7fe30 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ca800d0 | file object: 0xffff94895ca80150 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca80260 | file object: 0xffff94895ca802e0 | offsetby: 0x80 \Windows\System32\en-US\services.exe.mui pool: 0xffff94895ca803f0 | file object: 0xffff94895ca80470 | offsetby: 0x80 \Windows\System32\umpoext.dll pool: 0xffff94895ca80580 | file object: 0xffff94895ca80600 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca80710 | file object: 0xffff94895ca80790 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ca808a0 | file object: 0xffff94895ca80920 | offsetby: 0x80 \Windows\System32\umpnpmgr.dll pool: 0xffff94895ca80a30 | file object: 0xffff94895ca80ab0 | offsetby: 0x80 \Windows\Fonts\cga80woa.fon pool: 0xffff94895ca80bc0 | file object: 0xffff94895ca80c40 | offsetby: 0x80 \Windows\System32\sppc.dll pool: 0xffff94895ca80d50 | file object: 0xffff94895ca80dd0 | offsetby: 0x80 \Windows\System32\hid.dll pool: 0xffff94895ca81070 | file object: 0xffff94895ca810f0 | offsetby: 0x80 \Windows\Fonts\cga40woa.fon pool: 0xffff94895ca81200 | file object: 0xffff94895ca81280 | offsetby: 0x80 \Windows\Fonts\marlett.ttf pool: 0xffff94895ca81390 | file object: 0xffff94895ca81410 | offsetby: 0x80 \Windows\Fonts\dosapp.fon pool: 0xffff94895ca81520 | file object: 0xffff94895ca815a0 | offsetby: 0x80 \Windows\System32\dxgi.dll pool: 0xffff94895ca816b0 | file object: 0xffff94895ca81730 | offsetby: 0x80 \Windows\System32\mintdh.dll pool: 0xffff94895ca81840 | file object: 0xffff94895ca818c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca819d0 | file object: 0xffff94895ca81a50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca81b60 | file object: 0xffff94895ca81be0 | offsetby: 0x80 \Windows\System32\SleepStudy\UserNotPresentSession.etl pool: 0xffff94895ca81cf0 | file object: 0xffff94895ca81d70 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ca82010 | file object: 0xffff94895ca82090 | offsetby: 0x80 \Windows\System32\tdh.dll pool: 0xffff94895ca821a0 | file object: 0xffff94895ca82220 | offsetby: 0x80 \Windows\Fonts\ega40woa.fon pool: 0xffff94895ca82330 | file object: 0xffff94895ca823b0 | offsetby: 0x80 \Windows\Fonts\micross.ttf pool: 0xffff94895ca824c0 | file object: 0xffff94895ca82540 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca82650 | file object: 0xffff94895ca826d0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ca827e0 | file object: 0xffff94895ca82860 | offsetby: 0x80 \Windows\System32\umpo.dll pool: 0xffff94895ca82970 | file object: 0xffff94895ca829f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca82b00 | file object: 0xffff94895ca82b80 | offsetby: 0x80 \Windows\System32\DXCore.dll pool: 0xffff94895ca82c90 | file object: 0xffff94895ca82d10 | offsetby: 0x80 \Windows\Fonts\ega80woa.fon pool: 0xffff94895ca82e20 | file object: 0xffff94895ca82ea0 | offsetby: 0x80 \Windows\System32\gpapi.dll pool: 0xffff94895ca83140 | file object: 0xffff94895ca831c0 | offsetby: 0x80 \Windows\System32\ole32.dll pool: 0xffff94895ca832d0 | file object: 0xffff94895ca83350 | offsetby: 0x80 \Windows\System32\umpo-overrides.dll pool: 0xffff94895ca83460 | file object: 0xffff94895ca834e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca835f0 | file object: 0xffff94895ca83670 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca83780 | file object: 0xffff94895ca83800 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca83910 | file object: 0xffff94895ca83990 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 pool: 0xffff94895ca83aa0 | file object: 0xffff94895ca83b20 | offsetby: 0x80 \Windows\System32\rpcss.dll pool: 0xffff94895ca83c30 | file object: 0xffff94895ca83cb0 | offsetby: 0x80 \$Directory pool: 0xffff94895ca83dc0 | file object: 0xffff94895ca83e40 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT pool: 0xffff94895ca840e0 | file object: 0xffff94895ca84160 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca84270 | file object: 0xffff94895ca842f0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM.blf pool: 0xffff94895ca84400 | file object: 0xffff94895ca84480 | offsetby: 0x80 \$Directory pool: 0xffff94895ca84590 | file object: 0xffff94895ca84610 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms pool: 0xffff94895ca84720 | file object: 0xffff94895ca847a0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms pool: 0xffff94895ca848b0 | file object: 0xffff94895ca84930 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca84a40 | file object: 0xffff94895ca84ac0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ca84bd0 | file object: 0xffff94895ca84c50 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 pool: 0xffff94895ca84d60 | file object: 0xffff94895ca84de0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cabbde0 | file object: 0xffff94895cabbe40 | offsetby: 0x60 \$PrepareToShrinkFileSize pool: 0xffff94895cb02060 | file object: 0xffff94895cb020e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb021f0 | file object: 0xffff94895cb02270 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb02380 | file object: 0xffff94895cb02400 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb02510 | file object: 0xffff94895cb02590 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb026a0 | file object: 0xffff94895cb02720 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb02830 | file object: 0xffff94895cb028b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb029c0 | file object: 0xffff94895cb02a40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb02b50 | file object: 0xffff94895cb02bd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb02ce0 | file object: 0xffff94895cb02d60 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb02e70 | file object: 0xffff94895cb02ef0 | offsetby: 0x80 \Windows\System32\RpcRtRemote.dll pool: 0xffff94895cb03000 | file object: 0xffff94895cb03080 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb03190 | file object: 0xffff94895cb03210 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb03320 | file object: 0xffff94895cb033a0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb034b0 | file object: 0xffff94895cb03530 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895cb03640 | file object: 0xffff94895cb036c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb037d0 | file object: 0xffff94895cb03850 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb03960 | file object: 0xffff94895cb039e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb03af0 | file object: 0xffff94895cb03b70 | offsetby: 0x80 \Windows\System32\en-US\wshqos.dll.mui pool: 0xffff94895cb03c80 | file object: 0xffff94895cb03d00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb03e10 | file object: 0xffff94895cb03e90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb04130 | file object: 0xffff94895cb041b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb042c0 | file object: 0xffff94895cb04340 | offsetby: 0x80 \$Directory pool: 0xffff94895cb04450 | file object: 0xffff94895cb044d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb045e0 | file object: 0xffff94895cb04660 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb04770 | file object: 0xffff94895cb047f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb04900 | file object: 0xffff94895cb04980 | offsetby: 0x80 \Windows\System32\wshqos.dll pool: 0xffff94895cb04a90 | file object: 0xffff94895cb04b10 | offsetby: 0x80 \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895cb04c20 | file object: 0xffff94895cb04ca0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb04db0 | file object: 0xffff94895cb04e30 | offsetby: 0x80 \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895cb050d0 | file object: 0xffff94895cb05150 | offsetby: 0x80 \Windows\System32\RpcEpMap.dll pool: 0xffff94895cb05260 | file object: 0xffff94895cb052e0 | offsetby: 0x80 \Windows\System32\LogFiles\WMI\Terminal-Services-RCM-20200604-202034.etl pool: 0xffff94895cb053f0 | file object: 0xffff94895cb05470 | offsetby: 0x80 \Windows\System32\ResourcePolicyServer.dll pool: 0xffff94895cb05580 | file object: 0xffff94895cb05600 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb05710 | file object: 0xffff94895cb05790 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb058a0 | file object: 0xffff94895cb05920 | offsetby: 0x80 \Windows\System32\sysntfy.dll pool: 0xffff94895cb05a30 | file object: 0xffff94895cb05ab0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb05bc0 | file object: 0xffff94895cb05c40 | offsetby: 0x80 \Windows\System32\embeddedmodesvcapi.dll pool: 0xffff94895cb05d50 | file object: 0xffff94895cb05dd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb06070 | file object: 0xffff94895cb060f0 | offsetby: 0x80 \Windows\System32\twinapi.appcore.dll pool: 0xffff94895cb06200 | file object: 0xffff94895cb06280 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb06390 | file object: 0xffff94895cb06410 | offsetby: 0x80 \Windows\System32\ResourcePolicyClient.dll pool: 0xffff94895cb06520 | file object: 0xffff94895cb065a0 | offsetby: 0x80 \Windows\System32\PsmServiceExtHost.dll pool: 0xffff94895cb066b0 | file object: 0xffff94895cb06730 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb06840 | file object: 0xffff94895cb068c0 | offsetby: 0x80 \Windows\System32\wer.dll pool: 0xffff94895cb069d0 | file object: 0xffff94895cb06a50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb06b60 | file object: 0xffff94895cb06be0 | offsetby: 0x80 \Windows\System32\psmsrv.dll pool: 0xffff94895cb06cf0 | file object: 0xffff94895cb06d70 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb07010 | file object: 0xffff94895cb07090 | offsetby: 0x80 \Windows\System32\audioresourceregistrar.dll pool: 0xffff94895cb071a0 | file object: 0xffff94895cb07220 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb07330 | file object: 0xffff94895cb073b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb074c0 | file object: 0xffff94895cb07540 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cb07650 | file object: 0xffff94895cb076d0 | offsetby: 0x80 \Windows\System32\rmclient.dll pool: 0xffff94895cb077e0 | file object: 0xffff94895cb07860 | offsetby: 0x80 \Windows\System32\bisrv.dll pool: 0xffff94895cb07970 | file object: 0xffff94895cb079f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb07b00 | file object: 0xffff94895cb07b80 | offsetby: 0x80 \Windows\System32\xmllite.dll pool: 0xffff94895cb07c90 | file object: 0xffff94895cb07d10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb07e20 | file object: 0xffff94895cb07ea0 | offsetby: 0x80 \Windows\System32\dwmapi.dll pool: 0xffff94895cb08140 | file object: 0xffff94895cb081c0 | offsetby: 0x80 \Windows\System32\LogFiles\WMI\Terminal-Services-LSM-20200604-202034.etl pool: 0xffff94895cb082d0 | file object: 0xffff94895cb08350 | offsetby: 0x80 \Windows\System32\lsm.dll pool: 0xffff94895cb08460 | file object: 0xffff94895cb084e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb085f0 | file object: 0xffff94895cb08670 | offsetby: 0x80 \Windows\System32\uxtheme.dll pool: 0xffff94895cb08780 | file object: 0xffff94895cb08800 | offsetby: 0x80 \Windows\System32\UXInit.dll pool: 0xffff94895cb08910 | file object: 0xffff94895cb08990 | offsetby: 0x80 \Windows\Resources\Themes\aero\aero.msstyles pool: 0xffff94895cb08aa0 | file object: 0xffff94895cb08b20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb08c30 | file object: 0xffff94895cb08cb0 | offsetby: 0x80 \Windows\System32\rpcss.dll pool: 0xffff94895cb08dc0 | file object: 0xffff94895cb08e40 | offsetby: 0x80 \Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_96_01.mss pool: 0xffff94895cb090e0 | file object: 0xffff94895cb09160 | offsetby: 0x80 \Windows\System32\Microsoft\Protect\S-1-5-18\84f9f28d-f86f-4dad-bc67-16659402411a pool: 0xffff94895cb09270 | file object: 0xffff94895cb092f0 | offsetby: 0x80 \Windows\System32\dwminit.dll pool: 0xffff94895cb09400 | file object: 0xffff94895cb09480 | offsetby: 0x80 \Windows\System32\SystemEventsBrokerServer.dll pool: 0xffff94895cb09590 | file object: 0xffff94895cb09610 | offsetby: 0x80 \Windows\System32\BrokerLib.dll pool: 0xffff94895cb09720 | file object: 0xffff94895cb097a0 | offsetby: 0x80 \Windows\System32\dwm.exe pool: 0xffff94895cb098b0 | file object: 0xffff94895cb09930 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c.manifest pool: 0xffff94895cb09a40 | file object: 0xffff94895cb09ac0 | offsetby: 0x80 \Windows\System32\LogonUI.exe pool: 0xffff94895cb09bd0 | file object: 0xffff94895cb09c50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb09d60 | file object: 0xffff94895cb09de0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb8f060 | file object: 0xffff94895cb8f0e0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb8f1f0 | file object: 0xffff94895cb8f270 | offsetby: 0x80 \Windows\System32\dwmcore.dll pool: 0xffff94895cb8f380 | file object: 0xffff94895cb8f400 | offsetby: 0x80 \Windows\SysWOW64\TextInputFramework.dll pool: 0xffff94895cb8f510 | file object: 0xffff94895cb8f590 | offsetby: 0x80 \Windows\System32\winmm.dll pool: 0xffff94895cb8f6a0 | file object: 0xffff94895cb8f720 | offsetby: 0x80 \Windows\System32\d3d11.dll pool: 0xffff94895cb8f830 | file object: 0xffff94895cb8f8b0 | offsetby: 0x80 \Windows\System32\dwmredir.dll pool: 0xffff94895cb8f9c0 | file object: 0xffff94895cb8fa40 | offsetby: 0x80 \Windows\System32\D3DCompiler_47.dll pool: 0xffff94895cb8fb50 | file object: 0xffff94895cb8fbd0 | offsetby: 0x80 \Windows\System32\dsreg.dll pool: 0xffff94895cb8fce0 | file object: 0xffff94895cb8fd60 | offsetby: 0x80 \Windows\System32\en-US\dwm.exe.mui pool: 0xffff94895cb8fe70 | file object: 0xffff94895cb8fef0 | offsetby: 0x80 \Windows\System32\dab.dll pool: 0xffff94895cb90000 | file object: 0xffff94895cb90080 | offsetby: 0x80 \Windows\System32\dwmghost.dll pool: 0xffff94895cb90190 | file object: 0xffff94895cb90210 | offsetby: 0x80 \Windows\System32\LogonController.dll pool: 0xffff94895cb90320 | file object: 0xffff94895cb903a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb904b0 | file object: 0xffff94895cb90530 | offsetby: 0x80 \Windows\SysWOW64\policymanager.dll pool: 0xffff94895cb90640 | file object: 0xffff94895cb906c0 | offsetby: 0x80 \Windows\System32\msvcp110_win.dll pool: 0xffff94895cb907d0 | file object: 0xffff94895cb90850 | offsetby: 0x80 \Windows\System32\samlib.dll pool: 0xffff94895cb90960 | file object: 0xffff94895cb909e0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\sqlite3-3f3f539904eeed83d782efa53a8cf6cd.code pool: 0xffff94895cb90af0 | file object: 0xffff94895cb90b70 | offsetby: 0x80 \Windows\System32\d2d1.dll pool: 0xffff94895cb90c80 | file object: 0xffff94895cb90d00 | offsetby: 0x80 \Windows\System32\dabapi.dll pool: 0xffff94895cb90e10 | file object: 0xffff94895cb90e90 | offsetby: 0x80 \Windows\System32\d3d10warp.dll pool: 0xffff94895cb91130 | file object: 0xffff94895cb911b0 | offsetby: 0x80 \Windows\System32\uDWM.dll pool: 0xffff94895cb912c0 | file object: 0xffff94895cb91340 | offsetby: 0x80 \Windows\System32\dcomp.dll pool: 0xffff94895cb91450 | file object: 0xffff94895cb914d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb915e0 | file object: 0xffff94895cb91660 | offsetby: 0x80 \Windows\System32\shacct.dll pool: 0xffff94895cb91770 | file object: 0xffff94895cb917f0 | offsetby: 0x80 \Windows\System32\propsys.dll pool: 0xffff94895cb91900 | file object: 0xffff94895cb91980 | offsetby: 0x80 \Windows\System32\winmmbase.dll pool: 0xffff94895cb91a90 | file object: 0xffff94895cb91b10 | offsetby: 0x80 \Windows\System32\CoreMessaging.dll pool: 0xffff94895cb91c20 | file object: 0xffff94895cb91ca0 | offsetby: 0x80 \Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.752_en-us_fccbfed23fb8e8f9.manifest pool: 0xffff94895cb91db0 | file object: 0xffff94895cb91e30 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cb920d0 | file object: 0xffff94895cb92150 | offsetby: 0x80 \Windows\System32\apphelp.dll pool: 0xffff94895cb92260 | file object: 0xffff94895cb922e0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cb923f0 | file object: 0xffff94895cb92470 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb92580 | file object: 0xffff94895cb92600 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb92710 | file object: 0xffff94895cb92790 | offsetby: 0x80 \Windows\System32\config\BBI.LOG1 pool: 0xffff94895cb928a0 | file object: 0xffff94895cb92920 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb92a30 | file object: 0xffff94895cb92ab0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT pool: 0xffff94895cb92bc0 | file object: 0xffff94895cb92c40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb92d50 | file object: 0xffff94895cb92dd0 | offsetby: 0x80 \$Directory pool: 0xffff94895cb93070 | file object: 0xffff94895cb930f0 | offsetby: 0x80 \Windows\System32\config\BBI.LOG2 pool: 0xffff94895cb93200 | file object: 0xffff94895cb93280 | offsetby: 0x80 \$Directory pool: 0xffff94895cb93390 | file object: 0xffff94895cb93410 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb93520 | file object: 0xffff94895cb935a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VisualStudio\Editors\Microsoft.VisualStudio.Editors.dll pool: 0xffff94895cb936b0 | file object: 0xffff94895cb93730 | offsetby: 0x80 \Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895cb93840 | file object: 0xffff94895cb938c0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 pool: 0xffff94895cb939d0 | file object: 0xffff94895cb93a50 | offsetby: 0x80 \$Directory pool: 0xffff94895cb93b60 | file object: 0xffff94895cb93be0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM.blf pool: 0xffff94895cb93cf0 | file object: 0xffff94895cb93d70 | offsetby: 0x80 \Windows\System32\config\BBI pool: 0xffff94895cb94010 | file object: 0xffff94895cb94090 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 pool: 0xffff94895cb941a0 | file object: 0xffff94895cb94220 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms pool: 0xffff94895cb94330 | file object: 0xffff94895cb943b0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms pool: 0xffff94895cb944c0 | file object: 0xffff94895cb94540 | offsetby: 0x80 \$Directory pool: 0xffff94895cb94650 | file object: 0xffff94895cb946d0 | offsetby: 0x80 \Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895cb947e0 | file object: 0xffff94895cb94860 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb94970 | file object: 0xffff94895cb949f0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb94b00 | file object: 0xffff94895cb94b80 | offsetby: 0x80 \$Directory pool: 0xffff94895cb94c90 | file object: 0xffff94895cb94d10 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb94e20 | file object: 0xffff94895cb94ea0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb95140 | file object: 0xffff94895cb951c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb952d0 | file object: 0xffff94895cb95350 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb95460 | file object: 0xffff94895cb954e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb955f0 | file object: 0xffff94895cb95670 | offsetby: 0x80 \Windows\System32\nlaapi.dll pool: 0xffff94895cb95780 | file object: 0xffff94895cb95800 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb95910 | file object: 0xffff94895cb95990 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb95aa0 | file object: 0xffff94895cb95b20 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cb95c30 | file object: 0xffff94895cb95cb0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb95dc0 | file object: 0xffff94895cb95e40 | offsetby: 0x80 \Windows\System32\termsrv.dll pool: 0xffff94895cb960e0 | file object: 0xffff94895cb96160 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cb96270 | file object: 0xffff94895cb962f0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cb96400 | file object: 0xffff94895cb96480 | offsetby: 0x80 \Windows\System32\gpsvc.dll pool: 0xffff94895cb96590 | file object: 0xffff94895cb96610 | offsetby: 0x80 \Windows\System32\dsrole.dll pool: 0xffff94895cb96720 | file object: 0xffff94895cb967a0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\BE8B021F9E811DFC8C8A28572A17C05A_16D2E4BC920B861ABE54C1687CAA1EC8 pool: 0xffff94895cb968b0 | file object: 0xffff94895cb96930 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cb96a40 | file object: 0xffff94895cb96ac0 | offsetby: 0x80 \Windows\System32\lmhsvc.dll pool: 0xffff94895cb96bd0 | file object: 0xffff94895cb96c50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cb96d60 | file object: 0xffff94895cb96de0 | offsetby: 0x80 \Windows\System32\nrpsrv.dll pool: 0xffff94895cc3d060 | file object: 0xffff94895cc3d0e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3d1f0 | file object: 0xffff94895cc3d270 | offsetby: 0x80 \Windows\System32\mscms.dll pool: 0xffff94895cc3d380 | file object: 0xffff94895cc3d400 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3d510 | file object: 0xffff94895cc3d590 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3d6a0 | file object: 0xffff94895cc3d720 | offsetby: 0x80 \Windows\System32\ninput.dll pool: 0xffff94895cc3d830 | file object: 0xffff94895cc3d8b0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cc3d9c0 | file object: 0xffff94895cc3da40 | offsetby: 0x80 \Windows\System32\Windows.Gaming.Input.dll pool: 0xffff94895cc3db50 | file object: 0xffff94895cc3dbd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3dce0 | file object: 0xffff94895cc3dd60 | offsetby: 0x80 \Windows\System32\ISM.dll pool: 0xffff94895cc3de70 | file object: 0xffff94895cc3def0 | offsetby: 0x80 \Windows\System32\WindowsCodecs.dll pool: 0xffff94895cc3e000 | file object: 0xffff94895cc3e080 | offsetby: 0x80 \Windows\System32\OneCoreUAPCommonProxyStub.dll pool: 0xffff94895cc3e190 | file object: 0xffff94895cc3e210 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cc3e320 | file object: 0xffff94895cc3e3a0 | offsetby: 0x80 \Windows\System32\WinTypes.dll pool: 0xffff94895cc3e4b0 | file object: 0xffff94895cc3e530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3e640 | file object: 0xffff94895cc3e6c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cc3e7d0 | file object: 0xffff94895cc3e850 | offsetby: 0x80 \Windows\System32\CoreUIComponents.dll pool: 0xffff94895cc3e960 | file object: 0xffff94895cc3e9e0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cc3eaf0 | file object: 0xffff94895cc3eb70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3ec80 | file object: 0xffff94895cc3ed00 | offsetby: 0x80 \Windows\System32\UIAnimation.dll pool: 0xffff94895cc3ee10 | file object: 0xffff94895cc3ee90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3f130 | file object: 0xffff94895cc3f1b0 | offsetby: 0x80 \Windows\System32\wtsapi32.dll pool: 0xffff94895cc3f2c0 | file object: 0xffff94895cc3f340 | offsetby: 0x80 \Windows\System32\DispBroker.Desktop.dll pool: 0xffff94895cc3f450 | file object: 0xffff94895cc3f4d0 | offsetby: 0x80 \Windows\System32\taskschd.dll pool: 0xffff94895cc3f5e0 | file object: 0xffff94895cc3f660 | offsetby: 0x80 \Windows\System32\coloradapterclient.dll pool: 0xffff94895cc3f770 | file object: 0xffff94895cc3f7f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3f900 | file object: 0xffff94895cc3f980 | offsetby: 0x80 \Windows\System32\TimeBrokerServer.dll pool: 0xffff94895cc3fa90 | file object: 0xffff94895cc3fb10 | offsetby: 0x80 \Windows\System32\avrt.dll pool: 0xffff94895cc3fc20 | file object: 0xffff94895cc3fca0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc3fdb0 | file object: 0xffff94895cc3fe30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc400d0 | file object: 0xffff94895cc40150 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc40260 | file object: 0xffff94895cc402e0 | offsetby: 0x80 \Windows\Tasks pool: 0xffff94895cc403f0 | file object: 0xffff94895cc40470 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc40580 | file object: 0xffff94895cc40600 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc40710 | file object: 0xffff94895cc40790 | offsetby: 0x80 \Windows\System32\taskcomp.dll pool: 0xffff94895cc408a0 | file object: 0xffff94895cc40920 | offsetby: 0x80 \Windows\System32\SystemEventsBrokerClient.dll pool: 0xffff94895cc40a30 | file object: 0xffff94895cc40ab0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc40bc0 | file object: 0xffff94895cc40c40 | offsetby: 0x80 \Windows\System32\lsmproxy.dll pool: 0xffff94895cc40d50 | file object: 0xffff94895cc40dd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc41070 | file object: 0xffff94895cc410f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc41200 | file object: 0xffff94895cc41280 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc41390 | file object: 0xffff94895cc41410 | offsetby: 0x80 \Windows\System32\ubpm.dll pool: 0xffff94895cc41520 | file object: 0xffff94895cc415a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc416b0 | file object: 0xffff94895cc41730 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cc41840 | file object: 0xffff94895cc418c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc419d0 | file object: 0xffff94895cc41a50 | offsetby: 0x80 \Windows\System32\CSystemEventsBrokerClient.dll pool: 0xffff94895cc41b60 | file object: 0xffff94895cc41be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc41cf0 | file object: 0xffff94895cc41d70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc42010 | file object: 0xffff94895cc42090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc421a0 | file object: 0xffff94895cc42220 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cc42330 | file object: 0xffff94895cc423b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc424c0 | file object: 0xffff94895cc42540 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc42650 | file object: 0xffff94895cc426d0 | offsetby: 0x80 \Windows\Tasks\SA.DAT pool: 0xffff94895cc427e0 | file object: 0xffff94895cc42860 | offsetby: 0x80 \Windows\System32\ncbservice.dll pool: 0xffff94895cc42970 | file object: 0xffff94895cc429f0 | offsetby: 0x80 \Windows\System32\Windows.Devices.Radios.dll pool: 0xffff94895cc42b00 | file object: 0xffff94895cc42b80 | offsetby: 0x80 \Windows\System32\schedsvc.dll pool: 0xffff94895cc42c90 | file object: 0xffff94895cc42d10 | offsetby: 0x80 \Windows\System32\usermgrcli.dll pool: 0xffff94895cc42e20 | file object: 0xffff94895cc42ea0 | offsetby: 0x80 \Windows\System32\wmiclnt.dll pool: 0xffff94895cc43140 | file object: 0xffff94895cc431c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc432d0 | file object: 0xffff94895cc43350 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cc43460 | file object: 0xffff94895cc434e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc435f0 | file object: 0xffff94895cc43670 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cc43780 | file object: 0xffff94895cc43800 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc43910 | file object: 0xffff94895cc43990 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cc43aa0 | file object: 0xffff94895cc43b20 | offsetby: 0x80 \Windows\System32\bi.dll pool: 0xffff94895cc43c30 | file object: 0xffff94895cc43cb0 | offsetby: 0x80 \Windows\System32\BluetoothApis.dll pool: 0xffff94895cc43dc0 | file object: 0xffff94895cc43e40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc440e0 | file object: 0xffff94895cc44160 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc44270 | file object: 0xffff94895cc442f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cc44400 | file object: 0xffff94895cc44480 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cc44590 | file object: 0xffff94895cc44610 | offsetby: 0x80 \Windows\System32\BthRadioMedia.dll pool: 0xffff94895cc44720 | file object: 0xffff94895cc447a0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cc448b0 | file object: 0xffff94895cc44930 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cc44a40 | file object: 0xffff94895cc44ac0 | offsetby: 0x80 \Windows\System32\mstask.dll pool: 0xffff94895cc44bd0 | file object: 0xffff94895cc44c50 | offsetby: 0x80 \Windows\System32\httpprxc.dll pool: 0xffff94895cc44d60 | file object: 0xffff94895cc44de0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ccd0c00 | file object: 0xffff94895ccd0c60 | offsetby: 0x60 \Windows\System32\drivers\rdpdr.sys pool: 0xffff94895ccd1050 | file object: 0xffff94895ccd10b0 | offsetby: 0x60 \Windows\System32\drivers\rdpvideominiport.sys pool: 0xffff94895ccd4410 | file object: 0xffff94895ccd4470 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd4860 | file object: 0xffff94895ccd48c0 | offsetby: 0x60 \Windows\System32\drivers\tsusbhub.sys pool: 0xffff94895ccd4b40 | file object: 0xffff94895ccd4ba0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd5c80 | file object: 0xffff94895ccd5ce0 | offsetby: 0x60 \Windows\System32\drivers\winquic.sys pool: 0xffff94895ccd6240 | file object: 0xffff94895ccd62a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd6ae0 | file object: 0xffff94895ccd6b40 | offsetby: 0x60 \$PrepareToShrinkFileSize pool: 0xffff94895ccd70a0 | file object: 0xffff94895ccd7100 | offsetby: 0x60 \Windows\System32\drivers\mrxsmb.sys pool: 0xffff94895ccd7210 | file object: 0xffff94895ccd7270 | offsetby: 0x60 \Windows\System32\drivers\mrxsmb20.sys pool: 0xffff94895ccd7380 | file object: 0xffff94895ccd73e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd7660 | file object: 0xffff94895ccd76c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd77d0 | file object: 0xffff94895ccd7830 | offsetby: 0x60 \Windows\System32\drivers\bowser.sys pool: 0xffff94895ccd81e0 | file object: 0xffff94895ccd8240 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ccd9040 | file object: 0xffff94895ccd90a0 | offsetby: 0x60 \$PrepareToShrinkFileSize pool: 0xffff94895ccdd540 | file object: 0xffff94895ccdd5a0 | offsetby: 0x60 \Windows\System32\drivers\luafv.sys pool: 0xffff94895ccdd820 | file object: 0xffff94895ccdd880 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ccde960 | file object: 0xffff94895ccde9c0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ccdec40 | file object: 0xffff94895ccdeca0 | offsetby: 0x60 \$Directory pool: 0xffff94895ccdf090 | file object: 0xffff94895ccdf0f0 | offsetby: 0x60 \Windows\System32\drivers\cldflt.sys pool: 0xffff94895cd02080 | file object: 0xffff94895cd02100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd02210 | file object: 0xffff94895cd02290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd023a0 | file object: 0xffff94895cd02420 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd02530 | file object: 0xffff94895cd025b0 | offsetby: 0x80 \Windows\System32\rdpbase.dll pool: 0xffff94895cd026c0 | file object: 0xffff94895cd02740 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd02850 | file object: 0xffff94895cd028d0 | offsetby: 0x80 \Windows\System32\umb.dll pool: 0xffff94895cd029e0 | file object: 0xffff94895cd02a60 | offsetby: 0x80 \Windows\System32\SEMgrSvc.dll pool: 0xffff94895cd02b70 | file object: 0xffff94895cd02bf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd02d00 | file object: 0xffff94895cd02d80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd03020 | file object: 0xffff94895cd030a0 | offsetby: 0x80 \Windows\System32\vmbuspipe.dll pool: 0xffff94895cd031b0 | file object: 0xffff94895cd03230 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd03340 | file object: 0xffff94895cd033c0 | offsetby: 0x80 \Windows\System32\pdh.dll pool: 0xffff94895cd034d0 | file object: 0xffff94895cd03550 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd03660 | file object: 0xffff94895cd036e0 | offsetby: 0x80 \Windows\System32\Microsoft\Protect\S-1-5-18\User\2daf8b93-86fe-408b-9ccc-54bf0c3432f7 pool: 0xffff94895cd037f0 | file object: 0xffff94895cd03870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd03980 | file object: 0xffff94895cd03a00 | offsetby: 0x80 \Windows\System32\rdpcorets.dll pool: 0xffff94895cd03b10 | file object: 0xffff94895cd03b90 | offsetby: 0x80 \Windows\System32\netprofm.dll pool: 0xffff94895cd03ca0 | file object: 0xffff94895cd03d20 | offsetby: 0x80 \Windows\System32\rfxvmt.dll pool: 0xffff94895cd03e30 | file object: 0xffff94895cd03eb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd04150 | file object: 0xffff94895cd041d0 | offsetby: 0x80 \Windows\System32\Websocket.dll pool: 0xffff94895cd042e0 | file object: 0xffff94895cd04360 | offsetby: 0x80 \Windows\System32\rdpserverbase.dll pool: 0xffff94895cd04470 | file object: 0xffff94895cd044f0 | offsetby: 0x80 \Windows\System32\regapi.dll pool: 0xffff94895cd04600 | file object: 0xffff94895cd04680 | offsetby: 0x80 \Windows\System32\en-US\termsrv.dll.mui pool: 0xffff94895cd04790 | file object: 0xffff94895cd04810 | offsetby: 0x80 \Windows\System32\tlscsp.dll pool: 0xffff94895cd04920 | file object: 0xffff94895cd049a0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd04ab0 | file object: 0xffff94895cd04b30 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd04c40 | file object: 0xffff94895cd04cc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd04dd0 | file object: 0xffff94895cd04e50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd050f0 | file object: 0xffff94895cd05170 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd05280 | file object: 0xffff94895cd05300 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd05410 | file object: 0xffff94895cd05490 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd055a0 | file object: 0xffff94895cd05620 | offsetby: 0x80 \Windows\System32\AudioSes.dll pool: 0xffff94895cd05730 | file object: 0xffff94895cd057b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd058c0 | file object: 0xffff94895cd05940 | offsetby: 0x80 \Windows\System32\PCPKsp.dll pool: 0xffff94895cd05a50 | file object: 0xffff94895cd05ad0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd05be0 | file object: 0xffff94895cd05c60 | offsetby: 0x80 \Windows\System32\profsvcext.dll pool: 0xffff94895cd05d70 | file object: 0xffff94895cd05df0 | offsetby: 0x80 \Windows\System32\tbs.dll pool: 0xffff94895cd06090 | file object: 0xffff94895cd06110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd06220 | file object: 0xffff94895cd062a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd063b0 | file object: 0xffff94895cd06430 | offsetby: 0x80 \$Directory pool: 0xffff94895cd06540 | file object: 0xffff94895cd065c0 | offsetby: 0x80 \Windows\System32\MMDevAPI.dll pool: 0xffff94895cd066d0 | file object: 0xffff94895cd06750 | offsetby: 0x80 \Windows\System32\capauthz.dll pool: 0xffff94895cd06860 | file object: 0xffff94895cd068e0 | offsetby: 0x80 \Windows\System32\wkscli.dll pool: 0xffff94895cd069f0 | file object: 0xffff94895cd06a70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd06b80 | file object: 0xffff94895cd06c00 | offsetby: 0x80 \Windows\System32\ScDeviceEnum.dll pool: 0xffff94895cd06d10 | file object: 0xffff94895cd06d90 | offsetby: 0x80 \Windows\System32\cryptngc.dll pool: 0xffff94895cd07030 | file object: 0xffff94895cd070b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd071c0 | file object: 0xffff94895cd07240 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd07350 | file object: 0xffff94895cd073d0 | offsetby: 0x80 \Windows\System32\profsvc.dll pool: 0xffff94895cd074e0 | file object: 0xffff94895cd07560 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd07670 | file object: 0xffff94895cd076f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd07800 | file object: 0xffff94895cd07880 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd07990 | file object: 0xffff94895cd07a10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd07b20 | file object: 0xffff94895cd07ba0 | offsetby: 0x80 \$Directory pool: 0xffff94895cd07cb0 | file object: 0xffff94895cd07d30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd07e40 | file object: 0xffff94895cd07ec0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd08160 | file object: 0xffff94895cd081e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd082f0 | file object: 0xffff94895cd08370 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd08480 | file object: 0xffff94895cd08500 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd08610 | file object: 0xffff94895cd08690 | offsetby: 0x80 \Windows\System32\AudioEndpointBuilder.dll pool: 0xffff94895cd087a0 | file object: 0xffff94895cd08820 | offsetby: 0x80 \Windows\System32\wlanapi.dll pool: 0xffff94895cd08930 | file object: 0xffff94895cd089b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd08c50 | file object: 0xffff94895cd08cd0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd08de0 | file object: 0xffff94895cd08e60 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.Logon\pris\Windows.UI.Logon.en-US.pri pool: 0xffff94895cd09100 | file object: 0xffff94895cd09180 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd09290 | file object: 0xffff94895cd09310 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd09420 | file object: 0xffff94895cd094a0 | offsetby: 0x80 \Windows\System32\actxprxy.dll pool: 0xffff94895cd095b0 | file object: 0xffff94895cd09630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd09740 | file object: 0xffff94895cd097c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd098d0 | file object: 0xffff94895cd09950 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd09a60 | file object: 0xffff94895cd09ae0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd09bf0 | file object: 0xffff94895cd09c70 | offsetby: 0x80 \Windows\System32\TimeBrokerClient.dll pool: 0xffff94895cd09d80 | file object: 0xffff94895cd09e00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0a0a0 | file object: 0xffff94895cd0a120 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd0a230 | file object: 0xffff94895cd0a2b0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd0a3c0 | file object: 0xffff94895cd0a440 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd0a550 | file object: 0xffff94895cd0a5d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0a6e0 | file object: 0xffff94895cd0a760 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd0a870 | file object: 0xffff94895cd0a8f0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd0aa00 | file object: 0xffff94895cd0aa80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0ab90 | file object: 0xffff94895cd0ac10 | offsetby: 0x80 \Windows\System32\DispBroker.dll pool: 0xffff94895cd0ad20 | file object: 0xffff94895cd0ada0 | offsetby: 0x80 \Windows\System32\Windows.Graphics.dll pool: 0xffff94895cd0b040 | file object: 0xffff94895cd0b0c0 | offsetby: 0x80 \Windows\System32\WPTaskScheduler.dll pool: 0xffff94895cd0b1d0 | file object: 0xffff94895cd0b250 | offsetby: 0x80 \Windows\System32\tzres.dll pool: 0xffff94895cd0b360 | file object: 0xffff94895cd0b3e0 | offsetby: 0x80 \Windows\System32\en-US\tzres.dll.mui pool: 0xffff94895cd0b4f0 | file object: 0xffff94895cd0b570 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0b680 | file object: 0xffff94895cd0b700 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0b810 | file object: 0xffff94895cd0b890 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd0b9a0 | file object: 0xffff94895cd0ba20 | offsetby: 0x80 \Windows\System32\wevtsvc.dll pool: 0xffff94895cd0bb30 | file object: 0xffff94895cd0bbb0 | offsetby: 0x80 \Windows\System32\en-US\d2d1.dll.mui pool: 0xffff94895cd0bcc0 | file object: 0xffff94895cd0bd40 | offsetby: 0x80 \$Directory pool: 0xffff94895cd0be50 | file object: 0xffff94895cd0bed0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd0c170 | file object: 0xffff94895cd0c1f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0c300 | file object: 0xffff94895cd0c380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0c490 | file object: 0xffff94895cd0c510 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0c620 | file object: 0xffff94895cd0c6a0 | offsetby: 0x80 \Windows\System32\umrdp.dll pool: 0xffff94895cd0c7b0 | file object: 0xffff94895cd0c830 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0c940 | file object: 0xffff94895cd0c9c0 | offsetby: 0x80 \Windows\System32\en-US\umrdp.dll.mui pool: 0xffff94895cd0cad0 | file object: 0xffff94895cd0cb50 | offsetby: 0x80 \Windows\System32\netjoin.dll pool: 0xffff94895cd0cc60 | file object: 0xffff94895cd0cce0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0cdf0 | file object: 0xffff94895cd0ce70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd0d110 | file object: 0xffff94895cd0d190 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0d2a0 | file object: 0xffff94895cd0d320 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0d430 | file object: 0xffff94895cd0d4b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd0d5c0 | file object: 0xffff94895cd0d640 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx pool: 0xffff94895cd0d750 | file object: 0xffff94895cd0d7d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0d8e0 | file object: 0xffff94895cd0d960 | offsetby: 0x80 \$Directory pool: 0xffff94895cd0da70 | file object: 0xffff94895cd0daf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0dc00 | file object: 0xffff94895cd0dc80 | offsetby: 0x80 \Windows\System32\cabinet.dll pool: 0xffff94895cd0dd90 | file object: 0xffff94895cd0de10 | offsetby: 0x80 \Windows\System32\wevtapi.dll pool: 0xffff94895cd0e0b0 | file object: 0xffff94895cd0e130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0e240 | file object: 0xffff94895cd0e2c0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx pool: 0xffff94895cd0e3d0 | file object: 0xffff94895cd0e450 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0e560 | file object: 0xffff94895cd0e5e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0e6f0 | file object: 0xffff94895cd0e770 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0e880 | file object: 0xffff94895cd0e900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0ea10 | file object: 0xffff94895cd0ea90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0eba0 | file object: 0xffff94895cd0ec20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895cd0ed30 | file object: 0xffff94895cd0edb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0f050 | file object: 0xffff94895cd0f0d0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd0f1e0 | file object: 0xffff94895cd0f260 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0f500 | file object: 0xffff94895cd0f580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0f690 | file object: 0xffff94895cd0f710 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd0f820 | file object: 0xffff94895cd0f8a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0f9b0 | file object: 0xffff94895cd0fa30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0fb40 | file object: 0xffff94895cd0fbc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd0fcd0 | file object: 0xffff94895cd0fd50 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895cd0fe60 | file object: 0xffff94895cd0fee0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd10180 | file object: 0xffff94895cd10200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd10310 | file object: 0xffff94895cd10390 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd104a0 | file object: 0xffff94895cd10520 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd10630 | file object: 0xffff94895cd106b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd107c0 | file object: 0xffff94895cd10840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd10950 | file object: 0xffff94895cd109d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd10ae0 | file object: 0xffff94895cd10b60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd10c70 | file object: 0xffff94895cd10cf0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895cd10e00 | file object: 0xffff94895cd10e80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd11120 | file object: 0xffff94895cd111a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd112b0 | file object: 0xffff94895cd11330 | offsetby: 0x80 \Windows\System32\usermgr.dll pool: 0xffff94895cd11440 | file object: 0xffff94895cd114c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd115d0 | file object: 0xffff94895cd11650 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd11760 | file object: 0xffff94895cd117e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd118f0 | file object: 0xffff94895cd11970 | offsetby: 0x80 \Windows\System32\Windows.StateRepositoryClient.dll pool: 0xffff94895cd11a80 | file object: 0xffff94895cd11b00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895cd11c10 | file object: 0xffff94895cd11c90 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895cd11da0 | file object: 0xffff94895cd11e20 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce02080 | file object: 0xffff94895ce02100 | offsetby: 0x80 \Windows\System32\wmsgapi.dll pool: 0xffff94895ce02210 | file object: 0xffff94895ce02290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce023a0 | file object: 0xffff94895ce02420 | offsetby: 0x80 \Windows\System32\UserMgrLog.etl pool: 0xffff94895ce02530 | file object: 0xffff94895ce025b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce026c0 | file object: 0xffff94895ce02740 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce02850 | file object: 0xffff94895ce028d0 | offsetby: 0x80 \Windows\System32\WinSCard.dll pool: 0xffff94895ce029e0 | file object: 0xffff94895ce02a60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce02b70 | file object: 0xffff94895ce02bf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce03020 | file object: 0xffff94895ce030a0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce031b0 | file object: 0xffff94895ce03230 | offsetby: 0x80 \$Directory pool: 0xffff94895ce03340 | file object: 0xffff94895ce033c0 | offsetby: 0x80 \Windows\System32\winevt\Logs\System.evtx pool: 0xffff94895ce034d0 | file object: 0xffff94895ce03550 | offsetby: 0x80 \Windows\System32\winevt\Logs\Application.evtx pool: 0xffff94895ce03660 | file object: 0xffff94895ce036e0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Security.evtx pool: 0xffff94895ce037f0 | file object: 0xffff94895ce03870 | offsetby: 0x80 \Windows\System32\winevt\Logs\Internet Explorer.evtx pool: 0xffff94895ce03980 | file object: 0xffff94895ce03a00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce03b10 | file object: 0xffff94895ce03b90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce03ca0 | file object: 0xffff94895ce03d20 | offsetby: 0x80 \Windows\System32\policymanager.dll pool: 0xffff94895ce03e30 | file object: 0xffff94895ce03eb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce04150 | file object: 0xffff94895ce041d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce042e0 | file object: 0xffff94895ce04360 | offsetby: 0x80 \Windows\System32\certprop.dll pool: 0xffff94895ce04470 | file object: 0xffff94895ce044f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce04600 | file object: 0xffff94895ce04680 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce04790 | file object: 0xffff94895ce04810 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce04920 | file object: 0xffff94895ce049a0 | offsetby: 0x80 \Windows\System32\dhcpcore.dll pool: 0xffff94895ce04dd0 | file object: 0xffff94895ce04e50 | offsetby: 0x80 \Windows\System32\winevt\Logs\HardwareEvents.evtx pool: 0xffff94895ce050f0 | file object: 0xffff94895ce05170 | offsetby: 0x80 \Windows\System32\taskhostw.exe pool: 0xffff94895ce05280 | file object: 0xffff94895ce05300 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx pool: 0xffff94895ce05410 | file object: 0xffff94895ce05490 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx pool: 0xffff94895ce055a0 | file object: 0xffff94895ce05620 | offsetby: 0x80 \Windows\System32\winevt\Logs\Key Management Service.evtx pool: 0xffff94895ce05730 | file object: 0xffff94895ce057b0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx pool: 0xffff94895ce058c0 | file object: 0xffff94895ce05940 | offsetby: 0x80 \Windows\System32\drivers\storport.sys pool: 0xffff94895ce05a50 | file object: 0xffff94895ce05ad0 | offsetby: 0x80 \Windows\System32\drivers\ntfs.sys pool: 0xffff94895ce05be0 | file object: 0xffff94895ce05c60 | offsetby: 0x80 \Windows\System32\drivers\volsnap.sys pool: 0xffff94895ce05d70 | file object: 0xffff94895ce05df0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx pool: 0xffff94895ce06090 | file object: 0xffff94895ce06110 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx pool: 0xffff94895ce06220 | file object: 0xffff94895ce062a0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx pool: 0xffff94895ce063b0 | file object: 0xffff94895ce06430 | offsetby: 0x80 \Windows\System32\en-US\certprop.dll.mui pool: 0xffff94895ce06540 | file object: 0xffff94895ce065c0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Windows PowerShell.evtx pool: 0xffff94895ce066d0 | file object: 0xffff94895ce06750 | offsetby: 0x80 \Windows\System32\webauthn.dll pool: 0xffff94895ce06860 | file object: 0xffff94895ce068e0 | offsetby: 0x80 \Windows\System32\drivers\fltMgr.sys pool: 0xffff94895ce069f0 | file object: 0xffff94895ce06a70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce06b80 | file object: 0xffff94895ce06c00 | offsetby: 0x80 \Windows\System32\microsoft-windows-kernel-power-events.dll pool: 0xffff94895ce06d10 | file object: 0xffff94895ce06d90 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx pool: 0xffff94895ce07030 | file object: 0xffff94895ce070b0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx pool: 0xffff94895ce071c0 | file object: 0xffff94895ce07240 | offsetby: 0x80 \Windows\System32\PSHED.DLL pool: 0xffff94895ce07350 | file object: 0xffff94895ce073d0 | offsetby: 0x80 \Windows\System32\ci.dll pool: 0xffff94895ce074e0 | file object: 0xffff94895ce07560 | offsetby: 0x80 \Windows\System32\drivers\partmgr.sys pool: 0xffff94895ce07670 | file object: 0xffff94895ce076f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Windows Azure.evtx pool: 0xffff94895ce07800 | file object: 0xffff94895ce07880 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce07990 | file object: 0xffff94895ce07a10 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce07b20 | file object: 0xffff94895ce07ba0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx pool: 0xffff94895ce07cb0 | file object: 0xffff94895ce07d30 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx pool: 0xffff94895ce07e40 | file object: 0xffff94895ce07ec0 | offsetby: 0x80 \Windows\System32\microsoft-windows-system-events.dll pool: 0xffff94895ce08160 | file object: 0xffff94895ce081e0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx pool: 0xffff94895ce082f0 | file object: 0xffff94895ce08370 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx pool: 0xffff94895ce08480 | file object: 0xffff94895ce08500 | offsetby: 0x80 \Windows\System32\dhcpcore6.dll pool: 0xffff94895ce08610 | file object: 0xffff94895ce08690 | offsetby: 0x80 \Windows\System32\winnsi.dll pool: 0xffff94895ce087a0 | file object: 0xffff94895ce08820 | offsetby: 0x80 \Windows\System32\samcli.dll pool: 0xffff94895ce08930 | file object: 0xffff94895ce089b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce08ac0 | file object: 0xffff94895ce08b40 | offsetby: 0x80 \Windows\System32\microsoft-windows-kernel-processor-power-events.dll pool: 0xffff94895ce08c50 | file object: 0xffff94895ce08cd0 | offsetby: 0x80 \Windows\System32\netprofmsvc.dll pool: 0xffff94895ce08de0 | file object: 0xffff94895ce08e60 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx pool: 0xffff94895ce09100 | file object: 0xffff94895ce09180 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx pool: 0xffff94895ce09290 | file object: 0xffff94895ce09310 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx pool: 0xffff94895ce09420 | file object: 0xffff94895ce094a0 | offsetby: 0x80 \Windows\System32\upfc.exe pool: 0xffff94895ce095b0 | file object: 0xffff94895ce09630 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx pool: 0xffff94895ce09740 | file object: 0xffff94895ce097c0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx pool: 0xffff94895ce098d0 | file object: 0xffff94895ce09950 | offsetby: 0x80 \Windows\System32\wcmsvc.dll pool: 0xffff94895ce09a60 | file object: 0xffff94895ce09ae0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx pool: 0xffff94895ce09bf0 | file object: 0xffff94895ce09c70 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx pool: 0xffff94895ce09d80 | file object: 0xffff94895ce09e00 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx pool: 0xffff94895ce0a0a0 | file object: 0xffff94895ce0a120 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx pool: 0xffff94895ce0a230 | file object: 0xffff94895ce0a2b0 | offsetby: 0x80 \Windows\System32\adtschema.dll pool: 0xffff94895ce0a3c0 | file object: 0xffff94895ce0a440 | offsetby: 0x80 \Windows\System32\wpncore.dll pool: 0xffff94895ce0a550 | file object: 0xffff94895ce0a5d0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx pool: 0xffff94895ce0a6e0 | file object: 0xffff94895ce0a760 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx pool: 0xffff94895ce0a870 | file object: 0xffff94895ce0a8f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx pool: 0xffff94895ce0aa00 | file object: 0xffff94895ce0aa80 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx pool: 0xffff94895ce0ab90 | file object: 0xffff94895ce0ac10 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx pool: 0xffff94895ce0ad20 | file object: 0xffff94895ce0ada0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0b040 | file object: 0xffff94895ce0b0c0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce0b1d0 | file object: 0xffff94895ce0b250 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce0b360 | file object: 0xffff94895ce0b3e0 | offsetby: 0x80 \Windows\System32\Windows.StateRepository.dll pool: 0xffff94895ce0b4f0 | file object: 0xffff94895ce0b570 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0b680 | file object: 0xffff94895ce0b700 | offsetby: 0x80 \Windows\System32\version.dll pool: 0xffff94895ce0b9a0 | file object: 0xffff94895ce0ba20 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce0bb30 | file object: 0xffff94895ce0bbb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0bcc0 | file object: 0xffff94895ce0bd40 | offsetby: 0x80 \Windows\System32\dsparse.dll pool: 0xffff94895ce0be50 | file object: 0xffff94895ce0bed0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0c170 | file object: 0xffff94895ce0c1f0 | offsetby: 0x80 \Windows\System32\TaskApis.dll pool: 0xffff94895ce0c300 | file object: 0xffff94895ce0c380 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce0c490 | file object: 0xffff94895ce0c510 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0c620 | file object: 0xffff94895ce0c6a0 | offsetby: 0x80 \Windows\System32\wkssvc.dll pool: 0xffff94895ce0c7b0 | file object: 0xffff94895ce0c830 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0c940 | file object: 0xffff94895ce0c9c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0cad0 | file object: 0xffff94895ce0cb50 | offsetby: 0x80 \Windows\System32\StateRepository.Core.dll pool: 0xffff94895ce0cc60 | file object: 0xffff94895ce0cce0 | offsetby: 0x80 \Windows\System32\AppXDeploymentClient.dll pool: 0xffff94895ce0cdf0 | file object: 0xffff94895ce0ce70 | offsetby: 0x80 \Windows\System32\UserMgrProxy.dll pool: 0xffff94895ce0d110 | file object: 0xffff94895ce0d190 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0d2a0 | file object: 0xffff94895ce0d320 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0d430 | file object: 0xffff94895ce0d4b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 pool: 0xffff94895ce0d750 | file object: 0xffff94895ce0d7d0 | offsetby: 0x80 \Windows\System32\mpr.dll pool: 0xffff94895ce0d8e0 | file object: 0xffff94895ce0d960 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0da70 | file object: 0xffff94895ce0daf0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce0dd90 | file object: 0xffff94895ce0de10 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{AAEFBF30-3296-4663-B06E-E1DE5404F81C}.catalogItem pool: 0xffff94895ce0e0b0 | file object: 0xffff94895ce0e130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0e240 | file object: 0xffff94895ce0e2c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0e3d0 | file object: 0xffff94895ce0e450 | offsetby: 0x80 \Windows\System32\drivers\en-US\ndis.sys.mui pool: 0xffff94895ce0e560 | file object: 0xffff94895ce0e5e0 | offsetby: 0x80 \Windows\System32\VBoxService.exe pool: 0xffff94895ce0e6f0 | file object: 0xffff94895ce0e770 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0e880 | file object: 0xffff94895ce0e900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0ea10 | file object: 0xffff94895ce0ea90 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce0eba0 | file object: 0xffff94895ce0ec20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0ed30 | file object: 0xffff94895ce0edb0 | offsetby: 0x80 \Windows\System32\VBoxControl.exe pool: 0xffff94895ce0f050 | file object: 0xffff94895ce0f0d0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce0f1e0 | file object: 0xffff94895ce0f260 | offsetby: 0x80 \Windows\SysWOW64\MFMediaEngine.dll pool: 0xffff94895ce0f370 | file object: 0xffff94895ce0f3f0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce0f500 | file object: 0xffff94895ce0f580 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce0f690 | file object: 0xffff94895ce0f710 | offsetby: 0x80 \Windows\System32\VBoxHook.dll pool: 0xffff94895ce0f820 | file object: 0xffff94895ce0f8a0 | offsetby: 0x80 \Windows\System32\VBoxTray.exe pool: 0xffff94895ce0f9b0 | file object: 0xffff94895ce0fa30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce0fb40 | file object: 0xffff94895ce0fbc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ce0fcd0 | file object: 0xffff94895ce0fd50 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce0fe60 | file object: 0xffff94895ce0fee0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce10180 | file object: 0xffff94895ce10200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce10310 | file object: 0xffff94895ce10390 | offsetby: 0x80 \Windows\System32\wpdbusenum.dll pool: 0xffff94895ce104a0 | file object: 0xffff94895ce10520 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce10630 | file object: 0xffff94895ce106b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce107c0 | file object: 0xffff94895ce10840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce10950 | file object: 0xffff94895ce109d0 | offsetby: 0x80 \Windows\System32\dhcpcsvc6.dll pool: 0xffff94895ce10ae0 | file object: 0xffff94895ce10b60 | offsetby: 0x80 \Windows\System32\PortableDeviceConnectApi.dll pool: 0xffff94895ce10c70 | file object: 0xffff94895ce10cf0 | offsetby: 0x80 \Windows\System32\PortableDeviceApi.dll pool: 0xffff94895ce10e00 | file object: 0xffff94895ce10e80 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce11120 | file object: 0xffff94895ce111a0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce112b0 | file object: 0xffff94895ce11330 | offsetby: 0x80 \Windows\System32\dhcpcsvc.dll pool: 0xffff94895ce11440 | file object: 0xffff94895ce114c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce115d0 | file object: 0xffff94895ce11650 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce11760 | file object: 0xffff94895ce117e0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce118f0 | file object: 0xffff94895ce11970 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce11a80 | file object: 0xffff94895ce11b00 | offsetby: 0x80 \Windows\System32\VBoxMRXNP.dll pool: 0xffff94895ce11c10 | file object: 0xffff94895ce11c90 | offsetby: 0x80 \Windows\System32\drivers\VBoxGuest.sys pool: 0xffff94895ce11da0 | file object: 0xffff94895ce11e20 | offsetby: 0x80 \Windows\SysWOW64\VBoxOGL-x86.dll pool: 0xffff94895ce79df0 | file object: 0xffff94895ce79e50 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce7a690 | file object: 0xffff94895ce7a6f0 | offsetby: 0x60 \Windows\System32\drivers\rspndr.sys pool: 0xffff94895ce7a800 | file object: 0xffff94895ce7a860 | offsetby: 0x60 \Windows\System32\drivers\vmswitch.sys pool: 0xffff94895ce7b210 | file object: 0xffff94895ce7b270 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce7bd90 | file object: 0xffff94895ce7bdf0 | offsetby: 0x60 \Windows\System32\drivers\lltdio.sys pool: 0xffff94895ce7c1e0 | file object: 0xffff94895ce7c240 | offsetby: 0x60 \Windows\System32\drivers\mslldp.sys pool: 0xffff94895ce7c4c0 | file object: 0xffff94895ce7c520 | offsetby: 0x60 \Windows\System32\drivers\wanarp.sys pool: 0xffff94895ce7f880 | file object: 0xffff94895ce7f8e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce7fb60 | file object: 0xffff94895ce7fbc0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce7fcd0 | file object: 0xffff94895ce7fd30 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce80570 | file object: 0xffff94895ce805d0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce806e0 | file object: 0xffff94895ce80740 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce80850 | file object: 0xffff94895ce808b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce80ca0 | file object: 0xffff94895ce80d00 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce80e10 | file object: 0xffff94895ce80e70 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce813d0 | file object: 0xffff94895ce81430 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce816b0 | file object: 0xffff94895ce81710 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce81820 | file object: 0xffff94895ce81880 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce81990 | file object: 0xffff94895ce819f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce81c70 | file object: 0xffff94895ce81cd0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce81de0 | file object: 0xffff94895ce81e40 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce820c0 | file object: 0xffff94895ce82120 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce823a0 | file object: 0xffff94895ce82400 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82510 | file object: 0xffff94895ce82570 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82680 | file object: 0xffff94895ce826e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce827f0 | file object: 0xffff94895ce82850 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82960 | file object: 0xffff94895ce829c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82ad0 | file object: 0xffff94895ce82b30 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82c40 | file object: 0xffff94895ce82ca0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce82db0 | file object: 0xffff94895ce82e10 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83090 | file object: 0xffff94895ce830f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83200 | file object: 0xffff94895ce83260 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83370 | file object: 0xffff94895ce833d0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce834e0 | file object: 0xffff94895ce83540 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83650 | file object: 0xffff94895ce836b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce837c0 | file object: 0xffff94895ce83820 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83930 | file object: 0xffff94895ce83990 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83aa0 | file object: 0xffff94895ce83b00 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83c10 | file object: 0xffff94895ce83c70 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce83d80 | file object: 0xffff94895ce83de0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895ce85080 | file object: 0xffff94895ce85100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce85210 | file object: 0xffff94895ce85290 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ce853a0 | file object: 0xffff94895ce85420 | offsetby: 0x80 \$Directory pool: 0xffff94895ce85530 | file object: 0xffff94895ce855b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce856c0 | file object: 0xffff94895ce85740 | offsetby: 0x80 \Windows\System32\themeservice.dll pool: 0xffff94895ce85850 | file object: 0xffff94895ce858d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce859e0 | file object: 0xffff94895ce85a60 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce85b70 | file object: 0xffff94895ce85bf0 | offsetby: 0x80 \Windows\System32\winhttp.dll pool: 0xffff94895ce85d00 | file object: 0xffff94895ce85d80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce86020 | file object: 0xffff94895ce860a0 | offsetby: 0x80 \Windows\System32\WaaSMedicSvc.dll pool: 0xffff94895ce861b0 | file object: 0xffff94895ce86230 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-342BD74A.pf pool: 0xffff94895ce86340 | file object: 0xffff94895ce863c0 | offsetby: 0x80 \Windows\System32\FWPUCLNT.DLL pool: 0xffff94895ce864d0 | file object: 0xffff94895ce86550 | offsetby: 0x80 \Windows\System32\secur32.dll pool: 0xffff94895ce86660 | file object: 0xffff94895ce866e0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce867f0 | file object: 0xffff94895ce86870 | offsetby: 0x80 \Windows\System32\dnsrslvr.dll pool: 0xffff94895ce86980 | file object: 0xffff94895ce86a00 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 pool: 0xffff94895ce86b10 | file object: 0xffff94895ce86b90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce86ca0 | file object: 0xffff94895ce86d20 | offsetby: 0x80 \Windows\System32\ssdpapi.dll pool: 0xffff94895ce86e30 | file object: 0xffff94895ce86eb0 | offsetby: 0x80 \$Directory pool: 0xffff94895ce87150 | file object: 0xffff94895ce871d0 | offsetby: 0x80 \Windows\System32\sysmain.dll pool: 0xffff94895ce872e0 | file object: 0xffff94895ce87360 | offsetby: 0x80 \$Directory pool: 0xffff94895ce87470 | file object: 0xffff94895ce874f0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce87600 | file object: 0xffff94895ce87680 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce87790 | file object: 0xffff94895ce87810 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce87920 | file object: 0xffff94895ce879a0 | offsetby: 0x80 \Windows\System32\es.dll pool: 0xffff94895ce87ab0 | file object: 0xffff94895ce87b30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce87c40 | file object: 0xffff94895ce87cc0 | offsetby: 0x80 \Windows\System32\nlasvc.dll pool: 0xffff94895ce87dd0 | file object: 0xffff94895ce87e50 | offsetby: 0x80 \Windows\System32\ncsi.dll pool: 0xffff94895ce880f0 | file object: 0xffff94895ce88170 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce88280 | file object: 0xffff94895ce88300 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce88410 | file object: 0xffff94895ce88490 | offsetby: 0x80 \Windows\System32\WaaSMedicPS.dll pool: 0xffff94895ce885a0 | file object: 0xffff94895ce88620 | offsetby: 0x80 \$Directory pool: 0xffff94895ce88730 | file object: 0xffff94895ce887b0 | offsetby: 0x80 \Windows\System32\WaaSMedicPS.dll pool: 0xffff94895ce888c0 | file object: 0xffff94895ce88940 | offsetby: 0x80 \Windows\System32\DismApi.dll pool: 0xffff94895ce88a50 | file object: 0xffff94895ce88ad0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce88be0 | file object: 0xffff94895ce88c60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce88d70 | file object: 0xffff94895ce88df0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce89090 | file object: 0xffff94895ce89110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce89220 | file object: 0xffff94895ce892a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce893b0 | file object: 0xffff94895ce89430 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce89540 | file object: 0xffff94895ce895c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce896d0 | file object: 0xffff94895ce89750 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx pool: 0xffff94895ce89860 | file object: 0xffff94895ce898e0 | offsetby: 0x80 \Windows\System32\comres.dll pool: 0xffff94895ce899f0 | file object: 0xffff94895ce89a70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce89b80 | file object: 0xffff94895ce89c00 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce89d10 | file object: 0xffff94895ce89d90 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8a030 | file object: 0xffff94895ce8a0b0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce8a1c0 | file object: 0xffff94895ce8a240 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce8a350 | file object: 0xffff94895ce8a3d0 | offsetby: 0x80 \Windows\System32\drivers\etc pool: 0xffff94895ce8a4e0 | file object: 0xffff94895ce8a560 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8a670 | file object: 0xffff94895ce8a6f0 | offsetby: 0x80 \Windows\System32\SessEnv.dll pool: 0xffff94895ce8a800 | file object: 0xffff94895ce8a880 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8a990 | file object: 0xffff94895ce8aa10 | offsetby: 0x80 \Windows\System32\Sens.dll pool: 0xffff94895ce8ab20 | file object: 0xffff94895ce8aba0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8acb0 | file object: 0xffff94895ce8ad30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8ae40 | file object: 0xffff94895ce8aec0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce8b160 | file object: 0xffff94895ce8b1e0 | offsetby: 0x80 \Windows\SystemResources\comres.dll.mun pool: 0xffff94895ce8b2f0 | file object: 0xffff94895ce8b370 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8b480 | file object: 0xffff94895ce8b500 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8b610 | file object: 0xffff94895ce8b690 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8b7a0 | file object: 0xffff94895ce8b820 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce8b930 | file object: 0xffff94895ce8b9b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8bac0 | file object: 0xffff94895ce8bb40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8bc50 | file object: 0xffff94895ce8bcd0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8bde0 | file object: 0xffff94895ce8be60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8c100 | file object: 0xffff94895ce8c180 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8c290 | file object: 0xffff94895ce8c310 | offsetby: 0x80 \$Directory pool: 0xffff94895ce8c420 | file object: 0xffff94895ce8c4a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8c5b0 | file object: 0xffff94895ce8c630 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce8c740 | file object: 0xffff94895ce8c7c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8c8d0 | file object: 0xffff94895ce8c950 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8ca60 | file object: 0xffff94895ce8cae0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8cbf0 | file object: 0xffff94895ce8cc70 | offsetby: 0x80 \Windows\System32\FntCache.dll pool: 0xffff94895ce8cd80 | file object: 0xffff94895ce8ce00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8d0a0 | file object: 0xffff94895ce8d120 | offsetby: 0x80 \Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20200.0_x64__8wekyb3d8bbwe\en-us\hxcommintl.dll pool: 0xffff94895ce8d230 | file object: 0xffff94895ce8d2b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ce8d3c0 | file object: 0xffff94895ce8d440 | offsetby: 0x80 \Windows\System32\Microsoft\Protect\S-1-5-18\9eb69274-6978-4b47-971e-3a4f3f055676 pool: 0xffff94895ce8d550 | file object: 0xffff94895ce8d5d0 | offsetby: 0x80 \ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_373ee86b-ec20-4082-94ac-039dcac01c17 pool: 0xffff94895ce8d6e0 | file object: 0xffff94895ce8d760 | offsetby: 0x80 \Windows\System32\FontProvider.dll pool: 0xffff94895ce8d870 | file object: 0xffff94895ce8d8f0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895ce8da00 | file object: 0xffff94895ce8da80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8db90 | file object: 0xffff94895ce8dc10 | offsetby: 0x80 \$Directory pool: 0xffff94895ce8dd20 | file object: 0xffff94895ce8dda0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat pool: 0xffff94895ce8e040 | file object: 0xffff94895ce8e0c0 | offsetby: 0x80 \Windows\System32\en-US\ShutdownUX.dll.mui pool: 0xffff94895ce8e1d0 | file object: 0xffff94895ce8e250 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat pool: 0xffff94895ce8e360 | file object: 0xffff94895ce8e3e0 | offsetby: 0x80 \Windows\Fonts pool: 0xffff94895ce8e4f0 | file object: 0xffff94895ce8e570 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce8e680 | file object: 0xffff94895ce8e700 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db pool: 0xffff94895ce8e810 | file object: 0xffff94895ce8e890 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895ce8e9a0 | file object: 0xffff94895ce8ea20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8eb30 | file object: 0xffff94895ce8ebb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8ecc0 | file object: 0xffff94895ce8ed40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ce8ee50 | file object: 0xffff94895ce8eed0 | offsetby: 0x80 \Windows\System32\OnDemandConnRouteHelper.dll pool: 0xffff94895ce8f170 | file object: 0xffff94895ce8f1f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8f300 | file object: 0xffff94895ce8f380 | offsetby: 0x80 \Windows\System32\BFE.DLL pool: 0xffff94895ce8f490 | file object: 0xffff94895ce8f510 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce8f620 | file object: 0xffff94895ce8f6a0 | offsetby: 0x80 \Windows\System32\en-US\bfe.dll.mui pool: 0xffff94895ce8f7b0 | file object: 0xffff94895ce8f830 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\index-2a7e7a6cb463b94d8bffe4bbc26ebc24.code pool: 0xffff94895ce8f940 | file object: 0xffff94895ce8f9c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8fad0 | file object: 0xffff94895ce8fb50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce8fc60 | file object: 0xffff94895ce8fce0 | offsetby: 0x80 \$Directory pool: 0xffff94895ce90110 | file object: 0xffff94895ce90190 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Caches\cversions.2.db pool: 0xffff94895ce902a0 | file object: 0xffff94895ce90320 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db pool: 0xffff94895ce90430 | file object: 0xffff94895ce904b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce905c0 | file object: 0xffff94895ce90640 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.InkControls.dll pool: 0xffff94895ce90750 | file object: 0xffff94895ce907d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce908e0 | file object: 0xffff94895ce90960 | offsetby: 0x80 \$Directory pool: 0xffff94895ce90a70 | file object: 0xffff94895ce90af0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce90c00 | file object: 0xffff94895ce90c80 | offsetby: 0x80 \Windows\System32\en-US\MMDevAPI.dll.mui pool: 0xffff94895ce90d90 | file object: 0xffff94895ce90e10 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Controls.dll pool: 0xffff94895ce910b0 | file object: 0xffff94895ce91130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce91240 | file object: 0xffff94895ce912c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce913d0 | file object: 0xffff94895ce91450 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ce91560 | file object: 0xffff94895ce915e0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce916f0 | file object: 0xffff94895ce91770 | offsetby: 0x80 \$Directory pool: 0xffff94895ce91880 | file object: 0xffff94895ce91900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce91a10 | file object: 0xffff94895ce91a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce91ba0 | file object: 0xffff94895ce91c20 | offsetby: 0x80 \Windows\System32\dxgiadaptercache.exe pool: 0xffff94895ce91d30 | file object: 0xffff94895ce91db0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx pool: 0xffff94895ce92050 | file object: 0xffff94895ce920d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce921e0 | file object: 0xffff94895ce92260 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce92370 | file object: 0xffff94895ce923f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx pool: 0xffff94895ce92500 | file object: 0xffff94895ce92580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce92690 | file object: 0xffff94895ce92710 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce92820 | file object: 0xffff94895ce928a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce929b0 | file object: 0xffff94895ce92a30 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx pool: 0xffff94895ce92b40 | file object: 0xffff94895ce92bc0 | offsetby: 0x80 \Windows\System32\vssapi.dll pool: 0xffff94895ce92cd0 | file object: 0xffff94895ce92d50 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx pool: 0xffff94895ce92e60 | file object: 0xffff94895ce92ee0 | offsetby: 0x80 \Windows\System32\drivers\etc\hosts pool: 0xffff94895ce93180 | file object: 0xffff94895ce93200 | offsetby: 0x80 \Windows\System32\en-US\FirewallAPI.dll.mui pool: 0xffff94895ce93310 | file object: 0xffff94895ce93390 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx pool: 0xffff94895ce934a0 | file object: 0xffff94895ce93520 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx pool: 0xffff94895ce93630 | file object: 0xffff94895ce936b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce937c0 | file object: 0xffff94895ce93840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce93950 | file object: 0xffff94895ce939d0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895ce93ae0 | file object: 0xffff94895ce93b60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce93c70 | file object: 0xffff94895ce93cf0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx pool: 0xffff94895ce93e00 | file object: 0xffff94895ce93e80 | offsetby: 0x80 \Windows\System32\en-US\netprofmsvc.dll.mui pool: 0xffff94895ce94120 | file object: 0xffff94895ce941a0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx pool: 0xffff94895ce942b0 | file object: 0xffff94895ce94330 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Audit.evtx pool: 0xffff94895ce94440 | file object: 0xffff94895ce944c0 | offsetby: 0x80 \Windows\System32\en-US\AudioEndpointBuilder.dll.mui pool: 0xffff94895ce945d0 | file object: 0xffff94895ce94650 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx pool: 0xffff94895ce94760 | file object: 0xffff94895ce947e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ce948f0 | file object: 0xffff94895ce94970 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx pool: 0xffff94895ce94a80 | file object: 0xffff94895ce94b00 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ce94c10 | file object: 0xffff94895ce94c90 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx pool: 0xffff94895ce94da0 | file object: 0xffff94895ce94e20 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e002080 | file object: 0xffff94895e002100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e002210 | file object: 0xffff94895e002290 | offsetby: 0x80 \Windows\System32\audiodg.exe pool: 0xffff94895e0023a0 | file object: 0xffff94895e002420 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e002530 | file object: 0xffff94895e0025b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0026c0 | file object: 0xffff94895e002740 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e0029e0 | file object: 0xffff94895e002a60 | offsetby: 0x80 \Windows\System32\en-US\AudioSrv.dll.mui pool: 0xffff94895e002b70 | file object: 0xffff94895e002bf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e002d00 | file object: 0xffff94895e002d80 | offsetby: 0x80 \Windows\System32\HrtfApo.dll pool: 0xffff94895e003020 | file object: 0xffff94895e0030a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0031b0 | file object: 0xffff94895e003230 | offsetby: 0x80 \Windows\System32\CompPkgSup.dll pool: 0xffff94895e003340 | file object: 0xffff94895e0033c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0034d0 | file object: 0xffff94895e003550 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e003660 | file object: 0xffff94895e0036e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0037f0 | file object: 0xffff94895e003870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e003980 | file object: 0xffff94895e003a00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e003b10 | file object: 0xffff94895e003b90 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e003ca0 | file object: 0xffff94895e003d20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e003e30 | file object: 0xffff94895e003eb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e004150 | file object: 0xffff94895e0041d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0042e0 | file object: 0xffff94895e004360 | offsetby: 0x80 \Windows\System32\audiosrv.dll pool: 0xffff94895e004470 | file object: 0xffff94895e0044f0 | offsetby: 0x80 \Windows\System32\coreaudiopolicymanagerext.dll pool: 0xffff94895e004600 | file object: 0xffff94895e004680 | offsetby: 0x80 \Windows\System32\AudioSrvPolicyManager.dll pool: 0xffff94895e004790 | file object: 0xffff94895e004810 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e004920 | file object: 0xffff94895e0049a0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e004ab0 | file object: 0xffff94895e004b30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e004c40 | file object: 0xffff94895e004cc0 | offsetby: 0x80 \Windows\System32\Windows.Media.Devices.dll pool: 0xffff94895e004dd0 | file object: 0xffff94895e004e50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0050f0 | file object: 0xffff94895e005170 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e005280 | file object: 0xffff94895e005300 | offsetby: 0x80 \Windows\System32\npmproxy.dll pool: 0xffff94895e005410 | file object: 0xffff94895e005490 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e0055a0 | file object: 0xffff94895e005620 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e005730 | file object: 0xffff94895e0057b0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e0058c0 | file object: 0xffff94895e005940 | offsetby: 0x80 \Windows\System32\GroupPolicy\gpt.ini pool: 0xffff94895e005a50 | file object: 0xffff94895e005ad0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e005be0 | file object: 0xffff94895e005c60 | offsetby: 0x80 \Windows\System32\dusmsvc.dll pool: 0xffff94895e005d70 | file object: 0xffff94895e005df0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e006090 | file object: 0xffff94895e006110 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e006220 | file object: 0xffff94895e0062a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0063b0 | file object: 0xffff94895e006430 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e006860 | file object: 0xffff94895e0068e0 | offsetby: 0x80 \Windows\System32\en-US\gpsvc.dll.mui pool: 0xffff94895e0069f0 | file object: 0xffff94895e006a70 | offsetby: 0x80 \Windows\System32\en-US\audiodg.exe.mui pool: 0xffff94895e006b80 | file object: 0xffff94895e006c00 | offsetby: 0x80 \Windows\System32\mobilenetworking.dll pool: 0xffff94895e007030 | file object: 0xffff94895e0070b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0071c0 | file object: 0xffff94895e007240 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e007350 | file object: 0xffff94895e0073d0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e0074e0 | file object: 0xffff94895e007560 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\BE8B021F9E811DFC8C8A28572A17C05A_2863B8DFBF96CBD14BC361AA15F6AAB6 pool: 0xffff94895e007670 | file object: 0xffff94895e0076f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e007800 | file object: 0xffff94895e007880 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e007990 | file object: 0xffff94895e007a10 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e007b20 | file object: 0xffff94895e007ba0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e007e40 | file object: 0xffff94895e007ec0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e008160 | file object: 0xffff94895e0081e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0082f0 | file object: 0xffff94895e008370 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e008480 | file object: 0xffff94895e008500 | offsetby: 0x80 \Windows\System32\en-US\LogonController.dll.mui pool: 0xffff94895e008610 | file object: 0xffff94895e008690 | offsetby: 0x80 \$Directory pool: 0xffff94895e0087a0 | file object: 0xffff94895e008820 | offsetby: 0x80 \Windows\System32\BCP47Langs.dll pool: 0xffff94895e008930 | file object: 0xffff94895e0089b0 | offsetby: 0x80 \Windows\System32\WMALFXGFXDSP.dll pool: 0xffff94895e008ac0 | file object: 0xffff94895e008b40 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e008c50 | file object: 0xffff94895e008cd0 | offsetby: 0x80 \Windows\System32\Windows.UI.dll pool: 0xffff94895e008de0 | file object: 0xffff94895e008e60 | offsetby: 0x80 \Windows\System32\Windows.UI.XamlHost.dll pool: 0xffff94895e009100 | file object: 0xffff94895e009180 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e009290 | file object: 0xffff94895e009310 | offsetby: 0x80 \Windows\System32\TextInputFramework.dll pool: 0xffff94895e009420 | file object: 0xffff94895e0094a0 | offsetby: 0x80 \Windows\System32\InputHost.dll pool: 0xffff94895e0095b0 | file object: 0xffff94895e009630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e009740 | file object: 0xffff94895e0097c0 | offsetby: 0x80 \Windows\System32\Windows.UI.Logon.dll pool: 0xffff94895e0098d0 | file object: 0xffff94895e009950 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e009a60 | file object: 0xffff94895e009ae0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd pool: 0xffff94895e009bf0 | file object: 0xffff94895e009c70 | offsetby: 0x80 \Windows\System32\wincorlib.dll pool: 0xffff94895e009d80 | file object: 0xffff94895e009e00 | offsetby: 0x80 \Windows\System32\MrmCoreR.dll pool: 0xffff94895e00a0a0 | file object: 0xffff94895e00a120 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd pool: 0xffff94895e00a230 | file object: 0xffff94895e00a2b0 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.Logon\Windows.UI.Logon.pri pool: 0xffff94895e00a3c0 | file object: 0xffff94895e00a440 | offsetby: 0x80 \Windows\System32\LanguageOverlayUtil.dll pool: 0xffff94895e00a550 | file object: 0xffff94895e00a5d0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e00a6e0 | file object: 0xffff94895e00a760 | offsetby: 0x80 \Windows\rescache\_merged\3162064442\2350453880.pri pool: 0xffff94895e00a870 | file object: 0xffff94895e00a8f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e00aa00 | file object: 0xffff94895e00aa80 | offsetby: 0x80 \Windows\System32\security.dll pool: 0xffff94895e00ab90 | file object: 0xffff94895e00ac10 | offsetby: 0x80 \$Directory pool: 0xffff94895e00ad20 | file object: 0xffff94895e00ada0 | offsetby: 0x80 \Windows\System32\Syncreg.dll pool: 0xffff94895e00b040 | file object: 0xffff94895e00b0c0 | offsetby: 0x80 \Windows\System32\sensrsvc.dll pool: 0xffff94895e00b1d0 | file object: 0xffff94895e00b250 | offsetby: 0x80 \Windows\System32\ActionCenter.dll pool: 0xffff94895e00b360 | file object: 0xffff94895e00b3e0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e00b4f0 | file object: 0xffff94895e00b570 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e00b680 | file object: 0xffff94895e00b700 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\DataStore.edb pool: 0xffff94895e00b810 | file object: 0xffff94895e00b890 | offsetby: 0x80 \$Directory pool: 0xffff94895e00b9a0 | file object: 0xffff94895e00ba20 | offsetby: 0x80 \$Directory pool: 0xffff94895e00bb30 | file object: 0xffff94895e00bbb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e00bcc0 | file object: 0xffff94895e00bd40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e00be50 | file object: 0xffff94895e00bed0 | offsetby: 0x80 \$Directory pool: 0xffff94895e00c170 | file object: 0xffff94895e00c1f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm pool: 0xffff94895e00c300 | file object: 0xffff94895e00c380 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\StanCore.dll pool: 0xffff94895e00c490 | file object: 0xffff94895e00c510 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00c620 | file object: 0xffff94895e00c6a0 | offsetby: 0x80 \Windows\System32\iertutil.dll pool: 0xffff94895e00c7b0 | file object: 0xffff94895e00c830 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e00c940 | file object: 0xffff94895e00c9c0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e00cad0 | file object: 0xffff94895e00cb50 | offsetby: 0x80 \$Directory pool: 0xffff94895e00cc60 | file object: 0xffff94895e00cce0 | offsetby: 0x80 \Windows\System32\Windows.UI.Immersive.dll pool: 0xffff94895e00cdf0 | file object: 0xffff94895e00ce70 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx pool: 0xffff94895e00d110 | file object: 0xffff94895e00d190 | offsetby: 0x80 \Windows\System32\Windows.Storage.Search.dll pool: 0xffff94895e00d2a0 | file object: 0xffff94895e00d320 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.dll pool: 0xffff94895e00d430 | file object: 0xffff94895e00d4b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00d5c0 | file object: 0xffff94895e00d640 | offsetby: 0x80 \$Directory pool: 0xffff94895e00d750 | file object: 0xffff94895e00d7d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00d8e0 | file object: 0xffff94895e00d960 | offsetby: 0x80 \$Directory pool: 0xffff94895e00da70 | file object: 0xffff94895e00daf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00dc00 | file object: 0xffff94895e00dc80 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommonInetCore\Windows.UI.ShellCommonInetCore.pri pool: 0xffff94895e00dd90 | file object: 0xffff94895e00de10 | offsetby: 0x80 \Windows\System32\dosvc.dll pool: 0xffff94895e00e0b0 | file object: 0xffff94895e00e130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00e240 | file object: 0xffff94895e00e2c0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20200604_062038_413.etl pool: 0xffff94895e00e3d0 | file object: 0xffff94895e00e450 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895e00e560 | file object: 0xffff94895e00e5e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00e6f0 | file object: 0xffff94895e00e770 | offsetby: 0x80 \Windows\System32\BCP47mrm.dll pool: 0xffff94895e00e880 | file object: 0xffff94895e00e900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00ea10 | file object: 0xffff94895e00ea90 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e00eba0 | file object: 0xffff94895e00ec20 | offsetby: 0x80 \Windows\System32\urlmon.dll pool: 0xffff94895e00ed30 | file object: 0xffff94895e00edb0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e00f050 | file object: 0xffff94895e00f0d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00f1e0 | file object: 0xffff94895e00f260 | offsetby: 0x80 \Windows\System32\wshhyperv.dll pool: 0xffff94895e00f370 | file object: 0xffff94895e00f3f0 | offsetby: 0x80 \Windows\System32\msidle.dll pool: 0xffff94895e00f500 | file object: 0xffff94895e00f580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00f690 | file object: 0xffff94895e00f710 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00f820 | file object: 0xffff94895e00f8a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00f9b0 | file object: 0xffff94895e00fa30 | offsetby: 0x80 \Windows\System32\Windows.Globalization.dll pool: 0xffff94895e00fb40 | file object: 0xffff94895e00fbc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e00fcd0 | file object: 0xffff94895e00fd50 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Phone.dll pool: 0xffff94895e00fe60 | file object: 0xffff94895e00fee0 | offsetby: 0x80 \$Directory pool: 0xffff94895e010180 | file object: 0xffff94895e010200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e010310 | file object: 0xffff94895e010390 | offsetby: 0x80 \Windows\SysWOW64\AppXDeploymentClient.dll pool: 0xffff94895e0104a0 | file object: 0xffff94895e010520 | offsetby: 0x80 \Windows\SysWOW64\FirewallAPI.dll pool: 0xffff94895e010630 | file object: 0xffff94895e0106b0 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Resources.19h1.dll pool: 0xffff94895e0107c0 | file object: 0xffff94895e010840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e010950 | file object: 0xffff94895e0109d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e010ae0 | file object: 0xffff94895e010b60 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e010c70 | file object: 0xffff94895e010cf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e010e00 | file object: 0xffff94895e010e80 | offsetby: 0x80 \Windows\System32\DWrite.dll pool: 0xffff94895e011120 | file object: 0xffff94895e0111a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e0112b0 | file object: 0xffff94895e011330 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Maps.dll pool: 0xffff94895e011440 | file object: 0xffff94895e0114c0 | offsetby: 0x80 \Windows\System32\fhsvc.dll pool: 0xffff94895e0115d0 | file object: 0xffff94895e011650 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895e011760 | file object: 0xffff94895e0117e0 | offsetby: 0x80 \Windows\System32\directmanipulation.dll pool: 0xffff94895e0118f0 | file object: 0xffff94895e011970 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e011a80 | file object: 0xffff94895e011b00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e011c10 | file object: 0xffff94895e011c90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e011da0 | file object: 0xffff94895e011e20 | offsetby: 0x80 fÞ䨮Öᥔꏴ뱴㩀ǖfp\Device\HarddiskVolume2\Windows\System32\winmm pool: 0xffff94895e189080 | file object: 0xffff94895e1890e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e1891f0 | file object: 0xffff94895e189250 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e189360 | file object: 0xffff94895e1893c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e1894d0 | file object: 0xffff94895e189530 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e189640 | file object: 0xffff94895e1896a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e189920 | file object: 0xffff94895e189980 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e189a90 | file object: 0xffff94895e189af0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e189c00 | file object: 0xffff94895e189c60 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18a050 | file object: 0xffff94895e18a0b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18a1c0 | file object: 0xffff94895e18a220 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18a330 | file object: 0xffff94895e18a390 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18a610 | file object: 0xffff94895e18a670 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18a8f0 | file object: 0xffff94895e18a950 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18aa60 | file object: 0xffff94895e18aac0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18b190 | file object: 0xffff94895e18b1f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18b5e0 | file object: 0xffff94895e18b640 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18b750 | file object: 0xffff94895e18b7b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18b8c0 | file object: 0xffff94895e18b920 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e18eb10 | file object: 0xffff94895e18eb70 | offsetby: 0x60 \Windows\System32\drivers\http.sys pool: 0xffff94895e18fae0 | file object: 0xffff94895e18fb40 | offsetby: 0x60 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041021~31bf3856ad364e35~amd64~~10.0.18362.752.cat pool: 0xffff94895e191630 | file object: 0xffff94895e191690 | offsetby: 0x60 \Windows\System32\drivers\mpsdrv.sys pool: 0xffff94895e192040 | file object: 0xffff94895e1920a0 | offsetby: 0x60 \Windows\System32\drivers\srvnet.sys pool: 0xffff94895e193010 | file object: 0xffff94895e193070 | offsetby: 0x60 \Windows\System32\drivers\srv2.sys pool: 0xffff94895e1945a0 | file object: 0xffff94895e194600 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl pool: 0xffff94895e195120 | file object: 0xffff94895e195180 | offsetby: 0x60 \Windows\System32\drivers\acpi.sys pool: 0xffff94895e198370 | file object: 0xffff94895e1983d0 | offsetby: 0x60 \Windows\System32\drivers\ndis.sys pool: 0xffff94895e1bc080 | file object: 0xffff94895e1bc100 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-06F66AE0.pf pool: 0xffff94895e1bc210 | file object: 0xffff94895e1bc290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1bc3a0 | file object: 0xffff94895e1bc420 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e1bc530 | file object: 0xffff94895e1bc5b0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Hyper-V-VmSwitch-Operational.evtx pool: 0xffff94895e1bc6c0 | file object: 0xffff94895e1bc740 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1bc850 | file object: 0xffff94895e1bc8d0 | offsetby: 0x80 \Windows\SysWOW64\fwbase.dll pool: 0xffff94895e1bc9e0 | file object: 0xffff94895e1bca60 | offsetby: 0x80 \Windows\System32\netmsg.dll pool: 0xffff94895e1bcb70 | file object: 0xffff94895e1bcbf0 | offsetby: 0x80 \Windows\System32\spinf.dll pool: 0xffff94895e1bcd00 | file object: 0xffff94895e1bcd80 | offsetby: 0x80 \$Directory pool: 0xffff94895e1bd020 | file object: 0xffff94895e1bd0a0 | offsetby: 0x80 \Windows\System32\WSHTCPIP.DLL pool: 0xffff94895e1bd1b0 | file object: 0xffff94895e1bd230 | offsetby: 0x80 \Windows\System32\netapi32.dll pool: 0xffff94895e1bd340 | file object: 0xffff94895e1bd3c0 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895e1bd4d0 | file object: 0xffff94895e1bd550 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm pool: 0xffff94895e1bd660 | file object: 0xffff94895e1bd6e0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-18.datt pool: 0xffff94895e1bd7f0 | file object: 0xffff94895e1bd870 | offsetby: 0x80 \Windows\System32\Windows.StateRepositoryCore.dll pool: 0xffff94895e1bd980 | file object: 0xffff94895e1bda00 | offsetby: 0x80 \Windows\System32\rasadhlp.dll pool: 0xffff94895e1bdb10 | file object: 0xffff94895e1bdb90 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-S-1-5-18.datt pool: 0xffff94895e1bdca0 | file object: 0xffff94895e1bdd20 | offsetby: 0x80 \Windows\System32\shsvcs.dll pool: 0xffff94895e1bde30 | file object: 0xffff94895e1bdeb0 | offsetby: 0x80 \Windows\System32\en-US\dosvc.dll.mui pool: 0xffff94895e1be150 | file object: 0xffff94895e1be1d0 | offsetby: 0x80 \Windows\System32\wermgr.exe pool: 0xffff94895e1be2e0 | file object: 0xffff94895e1be360 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1be470 | file object: 0xffff94895e1be4f0 | offsetby: 0x80 \Windows\System32\en-US\netmsg.dll.mui pool: 0xffff94895e1be600 | file object: 0xffff94895e1be680 | offsetby: 0x80 \Windows\System32\wship6.dll pool: 0xffff94895e1be790 | file object: 0xffff94895e1be810 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1be920 | file object: 0xffff94895e1be9a0 | offsetby: 0x80 \Windows\SysWOW64\StateRepository.Core.dll pool: 0xffff94895e1beab0 | file object: 0xffff94895e1beb30 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal pool: 0xffff94895e1bec40 | file object: 0xffff94895e1becc0 | offsetby: 0x80 \$Directory pool: 0xffff94895e1bedd0 | file object: 0xffff94895e1bee50 | offsetby: 0x80 \$Directory pool: 0xffff94895e1bf0f0 | file object: 0xffff94895e1bf170 | offsetby: 0x80 \Windows\Fonts\segoeuisl.ttf pool: 0xffff94895e1bf280 | file object: 0xffff94895e1bf300 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e1bf410 | file object: 0xffff94895e1bf490 | offsetby: 0x80 \Windows\System32\ProximityCommon.dll pool: 0xffff94895e1bf5a0 | file object: 0xffff94895e1bf620 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1bf730 | file object: 0xffff94895e1bf7b0 | offsetby: 0x80 \Windows\System32\fveapi.dll pool: 0xffff94895e1bf8c0 | file object: 0xffff94895e1bf940 | offsetby: 0x80 \Windows\System32\ProximityService.dll pool: 0xffff94895e1bfa50 | file object: 0xffff94895e1bfad0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx pool: 0xffff94895e1bfbe0 | file object: 0xffff94895e1bfc60 | offsetby: 0x80 \Windows\System32\en-US\spoolsv.exe.mui pool: 0xffff94895e1bfd70 | file object: 0xffff94895e1bfdf0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c0090 | file object: 0xffff94895e1c0110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c0220 | file object: 0xffff94895e1c02a0 | offsetby: 0x80 \Windows\System32\wuaueng.dll pool: 0xffff94895e1c03b0 | file object: 0xffff94895e1c0430 | offsetby: 0x80 \Windows\System32\wcmcsp.dll pool: 0xffff94895e1c0540 | file object: 0xffff94895e1c05c0 | offsetby: 0x80 \Windows\System32\cmintegrator.dll pool: 0xffff94895e1c06d0 | file object: 0xffff94895e1c0750 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c0860 | file object: 0xffff94895e1c08e0 | offsetby: 0x80 \Windows\System32\spoolsv.exe pool: 0xffff94895e1c0b80 | file object: 0xffff94895e1c0c00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e1c0d10 | file object: 0xffff94895e1c0d90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1030 | file object: 0xffff94895e1c10b0 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c11c0 | file object: 0xffff94895e1c1240 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1350 | file object: 0xffff94895e1c13d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c14e0 | file object: 0xffff94895e1c1560 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1670 | file object: 0xffff94895e1c16f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1800 | file object: 0xffff94895e1c1880 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1990 | file object: 0xffff94895e1c1a10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1b20 | file object: 0xffff94895e1c1ba0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c1cb0 | file object: 0xffff94895e1c1d30 | offsetby: 0x80 \Windows\System32\ProximityCommonPal.dll pool: 0xffff94895e1c1e40 | file object: 0xffff94895e1c1ec0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c2160 | file object: 0xffff94895e1c21e0 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\NetFX3~.mum pool: 0xffff94895e1c22f0 | file object: 0xffff94895e1c2370 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c2480 | file object: 0xffff94895e1c2500 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c2610 | file object: 0xffff94895e1c2690 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c27a0 | file object: 0xffff94895e1c2820 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c2930 | file object: 0xffff94895e1c29b0 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\Logs\edbtmp. pool: 0xffff94895e1c2ac0 | file object: 0xffff94895e1c2b40 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c2c50 | file object: 0xffff94895e1c2cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c2de0 | file object: 0xffff94895e1c2e60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c3100 | file object: 0xffff94895e1c3180 | offsetby: 0x80 \Windows\System32\esent.dll pool: 0xffff94895e1c3290 | file object: 0xffff94895e1c3310 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e1c3420 | file object: 0xffff94895e1c34a0 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\Logs\edb.chk pool: 0xffff94895e1c35b0 | file object: 0xffff94895e1c3630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c3740 | file object: 0xffff94895e1c37c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c38d0 | file object: 0xffff94895e1c3950 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c3a60 | file object: 0xffff94895e1c3ae0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c3bf0 | file object: 0xffff94895e1c3c70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c3d80 | file object: 0xffff94895e1c3e00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c40a0 | file object: 0xffff94895e1c4120 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c4230 | file object: 0xffff94895e1c42b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c43c0 | file object: 0xffff94895e1c4440 | offsetby: 0x80 \Windows\System32\ProximityServicePal.dll pool: 0xffff94895e1c4550 | file object: 0xffff94895e1c45d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c46e0 | file object: 0xffff94895e1c4760 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c4870 | file object: 0xffff94895e1c48f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c4a00 | file object: 0xffff94895e1c4a80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c4b90 | file object: 0xffff94895e1c4c10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c4d20 | file object: 0xffff94895e1c4da0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c5040 | file object: 0xffff94895e1c50c0 | offsetby: 0x80 \Windows\System32\wups.dll pool: 0xffff94895e1c51d0 | file object: 0xffff94895e1c5250 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c5360 | file object: 0xffff94895e1c53e0 | offsetby: 0x80 \Windows\System32\wups2.dll pool: 0xffff94895e1c54f0 | file object: 0xffff94895e1c5570 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c5680 | file object: 0xffff94895e1c5700 | offsetby: 0x80 \Windows\System32\adsldp.dll pool: 0xffff94895e1c5810 | file object: 0xffff94895e1c5890 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\DataStore.jfm pool: 0xffff94895e1c59a0 | file object: 0xffff94895e1c5a20 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat pool: 0xffff94895e1c5b30 | file object: 0xffff94895e1c5bb0 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c5cc0 | file object: 0xffff94895e1c5d40 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c6170 | file object: 0xffff94895e1c61f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c6300 | file object: 0xffff94895e1c6380 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c6490 | file object: 0xffff94895e1c6510 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c6620 | file object: 0xffff94895e1c66a0 | offsetby: 0x80 \$ConvertToNonresident pool: 0xffff94895e1c67b0 | file object: 0xffff94895e1c6830 | offsetby: 0x80 \Windows\System32\wbemcomn.dll pool: 0xffff94895e1c6940 | file object: 0xffff94895e1c69c0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895e1c6ad0 | file object: 0xffff94895e1c6b50 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e1c6c60 | file object: 0xffff94895e1c6ce0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c6df0 | file object: 0xffff94895e1c6e70 | offsetby: 0x80 \Windows\System32\wbem\MOF pool: 0xffff94895e1c7110 | file object: 0xffff94895e1c7190 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c72a0 | file object: 0xffff94895e1c7320 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c7430 | file object: 0xffff94895e1c74b0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat.LOG1 pool: 0xffff94895e1c75c0 | file object: 0xffff94895e1c7640 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c7750 | file object: 0xffff94895e1c77d0 | offsetby: 0x80 \Windows\System32\wbem\WMIsvc.dll pool: 0xffff94895e1c78e0 | file object: 0xffff94895e1c7960 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c7a70 | file object: 0xffff94895e1c7af0 | offsetby: 0x80 \Windows\System32\wbem\wbemprox.dll pool: 0xffff94895e1c7c00 | file object: 0xffff94895e1c7c80 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e1c7d90 | file object: 0xffff94895e1c7e10 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat.LOG2 pool: 0xffff94895e1c80b0 | file object: 0xffff94895e1c8130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c8240 | file object: 0xffff94895e1c82c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c83d0 | file object: 0xffff94895e1c8450 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c8560 | file object: 0xffff94895e1c85e0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e1c86f0 | file object: 0xffff94895e1c8770 | offsetby: 0x80 \$Directory pool: 0xffff94895e1c8880 | file object: 0xffff94895e1c8900 | offsetby: 0x80 \Windows\System32\en-US\vsstrace.dll.mui pool: 0xffff94895e1c8a10 | file object: 0xffff94895e1c8a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c8ba0 | file object: 0xffff94895e1c8c20 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e1c8d30 | file object: 0xffff94895e1c8db0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx pool: 0xffff94895e1c9050 | file object: 0xffff94895e1c90d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c91e0 | file object: 0xffff94895e1c9260 | offsetby: 0x80 \Windows\System32\vsstrace.dll pool: 0xffff94895e1c9370 | file object: 0xffff94895e1c93f0 | offsetby: 0x80 \Windows\System32\NetSetupApi.dll pool: 0xffff94895e1c9500 | file object: 0xffff94895e1c9580 | offsetby: 0x80 \Windows\System32\FirewallAPI.dll pool: 0xffff94895e1c9690 | file object: 0xffff94895e1c9710 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c9820 | file object: 0xffff94895e1c98a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c99b0 | file object: 0xffff94895e1c9a30 | offsetby: 0x80 \Windows\System32\MPSSVC.dll pool: 0xffff94895e1c9b40 | file object: 0xffff94895e1c9bc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1c9cd0 | file object: 0xffff94895e1c9d50 | offsetby: 0x80 \Windows\System32\httpprxm.dll pool: 0xffff94895e1c9e60 | file object: 0xffff94895e1c9ee0 | offsetby: 0x80 \Windows\System32\fwpolicyiomgr.dll pool: 0xffff94895e1ca180 | file object: 0xffff94895e1ca200 | offsetby: 0x80 \Windows\System32\iphlpsvc.dll pool: 0xffff94895e1ca310 | file object: 0xffff94895e1ca390 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1ca4a0 | file object: 0xffff94895e1ca520 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1ca630 | file object: 0xffff94895e1ca6b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1ca7c0 | file object: 0xffff94895e1ca840 | offsetby: 0x80 \Windows\System32\LocationApi.dll pool: 0xffff94895e1ca950 | file object: 0xffff94895e1ca9d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1caae0 | file object: 0xffff94895e1cab60 | offsetby: 0x80 \Windows\System32\adhsvc.dll pool: 0xffff94895e1cac70 | file object: 0xffff94895e1cacf0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e1cae00 | file object: 0xffff94895e1cae80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e1cb120 | file object: 0xffff94895e1cb1a0 | offsetby: 0x80 \$Extend\$ObjId:$O:$INDEX_ALLOCATION pool: 0xffff94895e1cb2b0 | file object: 0xffff94895e1cb330 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e1cb440 | file object: 0xffff94895e1cb4c0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e1cb5d0 | file object: 0xffff94895e1cb650 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e1cb760 | file object: 0xffff94895e1cb7e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1cb8f0 | file object: 0xffff94895e1cb970 | offsetby: 0x80 \ProgramData\Microsoft\Windows\wfp\wfpdiag.etl pool: 0xffff94895e1cbc10 | file object: 0xffff94895e1cbc90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e1cbda0 | file object: 0xffff94895e1cbe20 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e3230d0 | file object: 0xffff94895e323150 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AppData\User\Default\Indexed DB\IndexedDB.jfm pool: 0xffff94895e323260 | file object: 0xffff94895e3232e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3233f0 | file object: 0xffff94895e323470 | offsetby: 0x80 \Windows\System32\en-US\iphlpsvc.dll.mui pool: 0xffff94895e323580 | file object: 0xffff94895e323600 | offsetby: 0x80 \Windows\System32\CatRoot pool: 0xffff94895e323710 | file object: 0xffff94895e323790 | offsetby: 0x80 \$Directory pool: 0xffff94895e3238a0 | file object: 0xffff94895e323920 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e323a30 | file object: 0xffff94895e323ab0 | offsetby: 0x80 \Windows\System32\wiatrace.dll pool: 0xffff94895e323bc0 | file object: 0xffff94895e323c40 | offsetby: 0x80 \$Directory pool: 0xffff94895e323d50 | file object: 0xffff94895e323dd0 | offsetby: 0x80 \Windows\System32\cryptcatsvc.dll pool: 0xffff94895e324070 | file object: 0xffff94895e3240f0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e324200 | file object: 0xffff94895e324280 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e324390 | file object: 0xffff94895e324410 | offsetby: 0x80 \Windows\System32\debugregsvc.dll pool: 0xffff94895e324520 | file object: 0xffff94895e3245a0 | offsetby: 0x80 \Windows\System32\mfasfsrcsnk.dll pool: 0xffff94895e3246b0 | file object: 0xffff94895e324730 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e324840 | file object: 0xffff94895e3248c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe pool: 0xffff94895e3249d0 | file object: 0xffff94895e324a50 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e324b60 | file object: 0xffff94895e324be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e325010 | file object: 0xffff94895e325090 | offsetby: 0x80 \Windows\System32\cryptsvc.dll pool: 0xffff94895e3251a0 | file object: 0xffff94895e325220 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e325330 | file object: 0xffff94895e3253b0 | offsetby: 0x80 \Windows\System32\crypttpmeksvc.dll pool: 0xffff94895e325650 | file object: 0xffff94895e3256d0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e3257e0 | file object: 0xffff94895e325860 | offsetby: 0x80 \Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe pool: 0xffff94895e325970 | file object: 0xffff94895e3259f0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e325b00 | file object: 0xffff94895e325b80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e325c90 | file object: 0xffff94895e325d10 | offsetby: 0x80 \$Directory pool: 0xffff94895e325e20 | file object: 0xffff94895e325ea0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e326140 | file object: 0xffff94895e3261c0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e3262d0 | file object: 0xffff94895e326350 | offsetby: 0x80 \Windows\System32\wbem\wbemcore.dll pool: 0xffff94895e326460 | file object: 0xffff94895e3264e0 | offsetby: 0x80 \Windows\System32\stdole2.tlb pool: 0xffff94895e3265f0 | file object: 0xffff94895e326670 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e326780 | file object: 0xffff94895e326800 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e326910 | file object: 0xffff94895e326990 | offsetby: 0x80 \Windows\System32\wbem\fastprox.dll pool: 0xffff94895e326aa0 | file object: 0xffff94895e326b20 | offsetby: 0x80 \Windows\System32\wbem\wbemsvc.dll pool: 0xffff94895e326c30 | file object: 0xffff94895e326cb0 | offsetby: 0x80 \Windows\System32\ExecModelClient.dll pool: 0xffff94895e326dc0 | file object: 0xffff94895e326e40 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\node_modules.asar.unpacked\native-keymap\build\Release\keymapping.node pool: 0xffff94895e3270e0 | file object: 0xffff94895e327160 | offsetby: 0x80 \Windows\System32\es.dll pool: 0xffff94895e327270 | file object: 0xffff94895e3272f0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e327400 | file object: 0xffff94895e327480 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e327590 | file object: 0xffff94895e327610 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e327720 | file object: 0xffff94895e3277a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3278b0 | file object: 0xffff94895e327930 | offsetby: 0x80 \Windows\System32\wlms\wlms.exe pool: 0xffff94895e327a40 | file object: 0xffff94895e327ac0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e327bd0 | file object: 0xffff94895e327c50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e327d60 | file object: 0xffff94895e327de0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e328080 | file object: 0xffff94895e328100 | offsetby: 0x80 \Windows\System32\httpprxp.dll pool: 0xffff94895e328210 | file object: 0xffff94895e328290 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpClient.dll pool: 0xffff94895e3283a0 | file object: 0xffff94895e328420 | offsetby: 0x80 \Windows\System32\wbem\esscli.dll pool: 0xffff94895e328530 | file object: 0xffff94895e3285b0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e3286c0 | file object: 0xffff94895e328740 | offsetby: 0x80 \Windows\System32\NcaSvc.dll pool: 0xffff94895e328850 | file object: 0xffff94895e3288d0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e3289e0 | file object: 0xffff94895e328a60 | offsetby: 0x80 \Windows\System32\msvcr120.dll pool: 0xffff94895e328b70 | file object: 0xffff94895e328bf0 | offsetby: 0x80 \Windows\System32\oleaut32.dll pool: 0xffff94895e328d00 | file object: 0xffff94895e328d80 | offsetby: 0x80 \Windows\System32\wbem\WinMgmtR.dll pool: 0xffff94895e329020 | file object: 0xffff94895e3290a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86\PrivateHost\Microsoft.VisualStudio.Threading.dll pool: 0xffff94895e3291b0 | file object: 0xffff94895e329230 | offsetby: 0x80 \$Directory pool: 0xffff94895e329340 | file object: 0xffff94895e3293c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpSvc.dll pool: 0xffff94895e3294d0 | file object: 0xffff94895e329550 | offsetby: 0x80 \Windows\System32\wbem\Repository\MAPPING1.MAP pool: 0xffff94895e329660 | file object: 0xffff94895e3296e0 | offsetby: 0x80 \Windows\System32\wbem\WmiPrvSD.dll pool: 0xffff94895e3297f0 | file object: 0xffff94895e329870 | offsetby: 0x80 \Windows\System32\ncobjapi.dll pool: 0xffff94895e329980 | file object: 0xffff94895e329a00 | offsetby: 0x80 \Windows\System32\weretw.dll pool: 0xffff94895e329b10 | file object: 0xffff94895e329b90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e329ca0 | file object: 0xffff94895e329d20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e329e30 | file object: 0xffff94895e329eb0 | offsetby: 0x80 \$Directory pool: 0xffff94895e32a150 | file object: 0xffff94895e32a1d0 | offsetby: 0x80 \Windows\System32\wbem\Repository\OBJECTS.DATA pool: 0xffff94895e32a2e0 | file object: 0xffff94895e32a360 | offsetby: 0x80 \Windows\System32\winsqlite3.dll pool: 0xffff94895e32a470 | file object: 0xffff94895e32a4f0 | offsetby: 0x80 \Windows\System32\windowsperformancerecordercontrol.dll pool: 0xffff94895e32a600 | file object: 0xffff94895e32a680 | offsetby: 0x80 \Windows\System32\wbem\Repository\MAPPING3.MAP pool: 0xffff94895e32a790 | file object: 0xffff94895e32a810 | offsetby: 0x80 \Windows\System32\diagtrack.dll pool: 0xffff94895e32a920 | file object: 0xffff94895e32a9a0 | offsetby: 0x80 \Windows\System32\wbem\Repository\MAPPING2.MAP pool: 0xffff94895e32aab0 | file object: 0xffff94895e32ab30 | offsetby: 0x80 \Windows\System32\amsi.dll pool: 0xffff94895e32ac40 | file object: 0xffff94895e32acc0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\osver.txt pool: 0xffff94895e32add0 | file object: 0xffff94895e32ae50 | offsetby: 0x80 \Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll pool: 0xffff94895e32b0f0 | file object: 0xffff94895e32b170 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e32b280 | file object: 0xffff94895e32b300 | offsetby: 0x80 \Windows\System32\wbem\wbemess.dll pool: 0xffff94895e32b410 | file object: 0xffff94895e32b490 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32b5a0 | file object: 0xffff94895e32b620 | offsetby: 0x80 \Windows\SysWOW64\msvcp110_win.dll pool: 0xffff94895e32b730 | file object: 0xffff94895e32b7b0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpLics.dll pool: 0xffff94895e32b8c0 | file object: 0xffff94895e32b940 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll pool: 0xffff94895e32ba50 | file object: 0xffff94895e32bad0 | offsetby: 0x80 \Windows\System32\wbem\repdrvfs.dll pool: 0xffff94895e32bbe0 | file object: 0xffff94895e32bc60 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx pool: 0xffff94895e32bd70 | file object: 0xffff94895e32bdf0 | offsetby: 0x80 \Windows\System32\wbem\wmiutils.dll pool: 0xffff94895e32c090 | file object: 0xffff94895e32c110 | offsetby: 0x80 \Windows\System32\wbem\Repository\INDEX.BTR pool: 0xffff94895e32c220 | file object: 0xffff94895e32c2a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32c3b0 | file object: 0xffff94895e32c430 | offsetby: 0x80 \Windows\System32\msvcp120.dll pool: 0xffff94895e32c540 | file object: 0xffff94895e32c5c0 | offsetby: 0x80 \Windows\System32\en-US\vsstrace.dll.mui pool: 0xffff94895e32c6d0 | file object: 0xffff94895e32c750 | offsetby: 0x80 \Windows\System32\trkwks.dll pool: 0xffff94895e32c9f0 | file object: 0xffff94895e32ca70 | offsetby: 0x80 \Windows\System32\srvsvc.dll pool: 0xffff94895e32cb80 | file object: 0xffff94895e32cc00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32cd10 | file object: 0xffff94895e32cd90 | offsetby: 0x80 \$Directory pool: 0xffff94895e32d030 | file object: 0xffff94895e32d0b0 | offsetby: 0x80 \Windows\System32\wbem\WmiPrvSE.exe pool: 0xffff94895e32d1c0 | file object: 0xffff94895e32d240 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{4A0B4BE9-EB63-4EFF-8D66-DDFA1FE53AA7}.catalogItem pool: 0xffff94895e32d350 | file object: 0xffff94895e32d3d0 | offsetby: 0x80 \Windows\System32\LocationFrameworkInternalPS.dll pool: 0xffff94895e32d4e0 | file object: 0xffff94895e32d560 | offsetby: 0x80 \Windows\System32\webio.dll pool: 0xffff94895e32d670 | file object: 0xffff94895e32d6f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e32d800 | file object: 0xffff94895e32d880 | offsetby: 0x80 \$Extend\$ObjId pool: 0xffff94895e32d990 | file object: 0xffff94895e32da10 | offsetby: 0x80 \Windows\System32\adhapi.dll pool: 0xffff94895e32db20 | file object: 0xffff94895e32dba0 | offsetby: 0x80 \Windows\System32\wbem\WmiPrvSE.exe pool: 0xffff94895e32dcb0 | file object: 0xffff94895e32dd30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32de40 | file object: 0xffff94895e32dec0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{CE8B62DA-AF46-4920-8566-B5699428BAB0}.catalogItem pool: 0xffff94895e32e160 | file object: 0xffff94895e32e1e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\WebClient\Diagnostics\ChromeDebugAdapter\ChromeDebugAdapterHost.pkgdef pool: 0xffff94895e32e2f0 | file object: 0xffff94895e32e370 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32e480 | file object: 0xffff94895e32e500 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32e610 | file object: 0xffff94895e32e690 | offsetby: 0x80 \Windows\System32\rtutils.dll pool: 0xffff94895e32e7a0 | file object: 0xffff94895e32e820 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{F7447124-3E96-41D0-AC70-BD7BAB622A18}.catalogItem pool: 0xffff94895e32e930 | file object: 0xffff94895e32e9b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32eac0 | file object: 0xffff94895e32eb40 | offsetby: 0x80 \Windows\System32\sstpsvc.dll pool: 0xffff94895e32ec50 | file object: 0xffff94895e32ecd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32ede0 | file object: 0xffff94895e32ee60 | offsetby: 0x80 \Windows\System32\httpapi.dll pool: 0xffff94895e32f100 | file object: 0xffff94895e32f180 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32f290 | file object: 0xffff94895e32f310 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32f420 | file object: 0xffff94895e32f4a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32f5b0 | file object: 0xffff94895e32f630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e32f740 | file object: 0xffff94895e32f7c0 | offsetby: 0x80 \Windows\System32\dps.dll pool: 0xffff94895e32f8d0 | file object: 0xffff94895e32f950 | offsetby: 0x80 \Program Files\Windows Defender\en-US\EppManifest.dll.mui pool: 0xffff94895e32fa60 | file object: 0xffff94895e32fae0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Support\MPLog-20200413-120121.log pool: 0xffff94895e32fbf0 | file object: 0xffff94895e32fc70 | offsetby: 0x80 \Windows\System32\sscoreext.dll pool: 0xffff94895e32fd80 | file object: 0xffff94895e32fe00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VC\vcpackages\VCProject.dll pool: 0xffff94895e3300a0 | file object: 0xffff94895e330120 | offsetby: 0x80 \System Volume Information\tracking.log pool: 0xffff94895e330230 | file object: 0xffff94895e3302b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3303c0 | file object: 0xffff94895e330440 | offsetby: 0x80 \Windows\System32\en-US\wldap32.dll.mui pool: 0xffff94895e330550 | file object: 0xffff94895e3305d0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e3306e0 | file object: 0xffff94895e330760 | offsetby: 0x80 \Program Files\Windows Defender\EppManifest.dll pool: 0xffff94895e330870 | file object: 0xffff94895e3308f0 | offsetby: 0x80 \Windows\SysWOW64\Windows.UI.Xaml.dll pool: 0xffff94895e330a00 | file object: 0xffff94895e330a80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e330b90 | file object: 0xffff94895e330c10 | offsetby: 0x80 \Windows\System32\wpnservice.dll pool: 0xffff94895e330d20 | file object: 0xffff94895e330da0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e331040 | file object: 0xffff94895e3310c0 | offsetby: 0x80 \Windows\System32\wmidcom.dll pool: 0xffff94895e3311d0 | file object: 0xffff94895e331250 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e331360 | file object: 0xffff94895e3313e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3314f0 | file object: 0xffff94895e331570 | offsetby: 0x80 \$Directory pool: 0xffff94895e331680 | file object: 0xffff94895e331700 | offsetby: 0x80 \$Directory pool: 0xffff94895e331810 | file object: 0xffff94895e331890 | offsetby: 0x80 \Windows\System32\mi.dll pool: 0xffff94895e3319a0 | file object: 0xffff94895e331a20 | offsetby: 0x80 \Windows\System32\cryptxml.dll pool: 0xffff94895e331b30 | file object: 0xffff94895e331bb0 | offsetby: 0x80 \Windows\System32\miutils.dll pool: 0xffff94895e331cc0 | file object: 0xffff94895e331d40 | offsetby: 0x80 \Windows\System32\resutils.dll pool: 0xffff94895e331e50 | file object: 0xffff94895e331ed0 | offsetby: 0x80 \Windows\System32\wdi.dll pool: 0xffff94895e332170 | file object: 0xffff94895e3321f0 | offsetby: 0x80 \Windows\System32\clusapi.dll pool: 0xffff94895e332300 | file object: 0xffff94895e332380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e332490 | file object: 0xffff94895e332510 | offsetby: 0x80 \$Directory pool: 0xffff94895e332620 | file object: 0xffff94895e3326a0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Support\MPDetection-20200602-000558.log pool: 0xffff94895e3327b0 | file object: 0xffff94895e332830 | offsetby: 0x80 \Windows\System32\sppsvc.exe pool: 0xffff94895e332940 | file object: 0xffff94895e3329c0 | offsetby: 0x80 \Windows\System32\sscore.dll pool: 0xffff94895e332ad0 | file object: 0xffff94895e332b50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e332c60 | file object: 0xffff94895e332ce0 | offsetby: 0x80 \Windows\System32\wdscore.dll pool: 0xffff94895e332df0 | file object: 0xffff94895e332e70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e333110 | file object: 0xffff94895e333190 | offsetby: 0x80 \Windows\System32\Windows.Internal.ShellCommon.Broker.dll pool: 0xffff94895e3332a0 | file object: 0xffff94895e333320 | offsetby: 0x80 \Windows\Panther\UnattendGC\setupact.log pool: 0xffff94895e333430 | file object: 0xffff94895e3334b0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e3335c0 | file object: 0xffff94895e333640 | offsetby: 0x80 \Windows\Panther\UnattendGC\diagerr.xml pool: 0xffff94895e333750 | file object: 0xffff94895e3337d0 | offsetby: 0x80 \Windows\System32\en-US\vsstrace.dll.mui pool: 0xffff94895e3338e0 | file object: 0xffff94895e333960 | offsetby: 0x80 \Windows\System32\dbghelp.dll pool: 0xffff94895e333a70 | file object: 0xffff94895e333af0 | offsetby: 0x80 \Windows\Panther\UnattendGC\diagwrn.xml pool: 0xffff94895e333c00 | file object: 0xffff94895e333c80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e333d90 | file object: 0xffff94895e333e10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3340b0 | file object: 0xffff94895e334130 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\index-94f8ddd9818e21dac7fcdf306889d39a.code pool: 0xffff94895e334240 | file object: 0xffff94895e3342c0 | offsetby: 0x80 \$Directory pool: 0xffff94895e3343d0 | file object: 0xffff94895e334450 | offsetby: 0x80 \Windows\System32\dbgcore.dll pool: 0xffff94895e334560 | file object: 0xffff94895e3345e0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e3346f0 | file object: 0xffff94895e334770 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json pool: 0xffff94895e334880 | file object: 0xffff94895e334900 | offsetby: 0x80 \$Directory pool: 0xffff94895e334a10 | file object: 0xffff94895e334a90 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\bat\package.json pool: 0xffff94895e334ba0 | file object: 0xffff94895e334c20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e334d30 | file object: 0xffff94895e334db0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json pool: 0xffff94895e335050 | file object: 0xffff94895e3350d0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\TELEMETRY.ASM-WINDOWSSQ.json pool: 0xffff94895e3351e0 | file object: 0xffff94895e335260 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json pool: 0xffff94895e335370 | file object: 0xffff94895e3353f0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json pool: 0xffff94895e335500 | file object: 0xffff94895e335580 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e335690 | file object: 0xffff94895e335710 | offsetby: 0x80 \Windows\System32\ReAgent.dll pool: 0xffff94895e335820 | file object: 0xffff94895e3358a0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json pool: 0xffff94895e3359b0 | file object: 0xffff94895e335a30 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e335b40 | file object: 0xffff94895e335bc0 | offsetby: 0x80 \$Directory pool: 0xffff94895e335cd0 | file object: 0xffff94895e335d50 | offsetby: 0x80 \Windows\System32\gdi32full.dll pool: 0xffff94895e335e60 | file object: 0xffff94895e335ee0 | offsetby: 0x80 \$Directory pool: 0xffff94895e336180 | file object: 0xffff94895e336200 | offsetby: 0x80 \Windows\System32\msvcrt.dll pool: 0xffff94895e336310 | file object: 0xffff94895e336390 | offsetby: 0x80 \Windows\System32\rpcrt4.dll pool: 0xffff94895e3364a0 | file object: 0xffff94895e336520 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e336630 | file object: 0xffff94895e3366b0 | offsetby: 0x80 \System Volume Information\tracking.log pool: 0xffff94895e3367c0 | file object: 0xffff94895e336840 | offsetby: 0x80 \Windows\System32\gdi32.dll pool: 0xffff94895e336950 | file object: 0xffff94895e3369d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e336ae0 | file object: 0xffff94895e336b60 | offsetby: 0x80 \Windows\System32\msasn1.dll pool: 0xffff94895e336c70 | file object: 0xffff94895e336cf0 | offsetby: 0x80 \Windows\System32\kernel.appcore.dll pool: 0xffff94895e336e00 | file object: 0xffff94895e336e80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e337120 | file object: 0xffff94895e3371a0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json pool: 0xffff94895e3372b0 | file object: 0xffff94895e337330 | offsetby: 0x80 \Windows\System32\KernelBase.dll pool: 0xffff94895e337440 | file object: 0xffff94895e3374c0 | offsetby: 0x80 \Windows\System32\en-US\sppsvc.exe.mui pool: 0xffff94895e3375d0 | file object: 0xffff94895e337650 | offsetby: 0x80 \Windows\System32\crypt32.dll pool: 0xffff94895e337760 | file object: 0xffff94895e3377e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3378f0 | file object: 0xffff94895e337970 | offsetby: 0x80 \Windows\System32\sechost.dll pool: 0xffff94895e337a80 | file object: 0xffff94895e337b00 | offsetby: 0x80 \Windows\System32\ucrtbase.dll pool: 0xffff94895e337c10 | file object: 0xffff94895e337c90 | offsetby: 0x80 \Windows\DiagTrack\utc.allow.diffbase pool: 0xffff94895e337da0 | file object: 0xffff94895e337e20 | offsetby: 0x80 \Windows\SysWOW64\edgehtml.dll pool: 0xffff94895e3380c0 | file object: 0xffff94895e338140 | offsetby: 0x80 \Windows\System32\kernel32.dll pool: 0xffff94895e338250 | file object: 0xffff94895e3382d0 | offsetby: 0x80 \Windows\System32\advapi32.dll pool: 0xffff94895e3383e0 | file object: 0xffff94895e338460 | offsetby: 0x80 \Windows\System32\xmllite.dll pool: 0xffff94895e338570 | file object: 0xffff94895e3385f0 | offsetby: 0x80 \Windows\System32\webservices.dll pool: 0xffff94895e338700 | file object: 0xffff94895e338780 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e338890 | file object: 0xffff94895e338910 | offsetby: 0x80 \Windows\System32\user32.dll pool: 0xffff94895e338a20 | file object: 0xffff94895e338aa0 | offsetby: 0x80 \Windows\System32\msvcp_win.dll pool: 0xffff94895e338bb0 | file object: 0xffff94895e338c30 | offsetby: 0x80 \Windows\System32\win32u.dll pool: 0xffff94895e338d40 | file object: 0xffff94895e338dc0 | offsetby: 0x80 \Windows\System32\combase.dll pool: 0xffff94895e339060 | file object: 0xffff94895e3390e0 | offsetby: 0x80 \Windows\System32\cdp.dll pool: 0xffff94895e3391f0 | file object: 0xffff94895e339270 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e339380 | file object: 0xffff94895e339400 | offsetby: 0x80 \Windows\System32\HNetCfgClient.dll pool: 0xffff94895e339510 | file object: 0xffff94895e339590 | offsetby: 0x80 \Windows\System32\en-US\hnetcfgclient.dll.mui pool: 0xffff94895e3396a0 | file object: 0xffff94895e339720 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3399c0 | file object: 0xffff94895e339a40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e339b50 | file object: 0xffff94895e339bd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e339ce0 | file object: 0xffff94895e339d60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e339e70 | file object: 0xffff94895e339ef0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33a190 | file object: 0xffff94895e33a210 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33a320 | file object: 0xffff94895e33a3a0 | offsetby: 0x80 \Windows\System32\diagperf.dll pool: 0xffff94895e33a4b0 | file object: 0xffff94895e33a530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33a640 | file object: 0xffff94895e33a6c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\WebClient\Diagnostics\EdgeDebugAdapter\EdgeDebugAdapterHost.pkgdef pool: 0xffff94895e33a7d0 | file object: 0xffff94895e33a850 | offsetby: 0x80 \Windows\System32\rasmans.dll pool: 0xffff94895e33a960 | file object: 0xffff94895e33a9e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33aaf0 | file object: 0xffff94895e33ab70 | offsetby: 0x80 \Windows\System32\eappprxy.dll pool: 0xffff94895e33ac80 | file object: 0xffff94895e33ad00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33ae10 | file object: 0xffff94895e33ae90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e33b130 | file object: 0xffff94895e33b1b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33b2c0 | file object: 0xffff94895e33b340 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895e33b450 | file object: 0xffff94895e33b4d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpLics.dll pool: 0xffff94895e33b5e0 | file object: 0xffff94895e33b660 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33b900 | file object: 0xffff94895e33b980 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33ba90 | file object: 0xffff94895e33bb10 | offsetby: 0x80 \Windows\System32\wbem\cimwin32.dll pool: 0xffff94895e33bc20 | file object: 0xffff94895e33bca0 | offsetby: 0x80 \Windows\System32\framedynos.dll pool: 0xffff94895e33bdb0 | file object: 0xffff94895e33be30 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Templates.CS.Wpf.Resources,version=16.6.30013.169,language=en-US\_package.json pool: 0xffff94895e33c0d0 | file object: 0xffff94895e33c150 | offsetby: 0x80 \Windows\System32\dssenh.dll pool: 0xffff94895e33c260 | file object: 0xffff94895e33c2e0 | offsetby: 0x80 \Windows\System32\mskeyprotect.dll pool: 0xffff94895e33c3f0 | file object: 0xffff94895e33c470 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\safer-94b81d01263bfe7f20aa528ae0e18e7a.code pool: 0xffff94895e33c580 | file object: 0xffff94895e33c600 | offsetby: 0x80 \$Directory pool: 0xffff94895e33c710 | file object: 0xffff94895e33c790 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33c8a0 | file object: 0xffff94895e33c920 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx pool: 0xffff94895e33ca30 | file object: 0xffff94895e33cab0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx pool: 0xffff94895e33cbc0 | file object: 0xffff94895e33cc40 | offsetby: 0x80 \Windows\System32\pnpts.dll pool: 0xffff94895e33cd50 | file object: 0xffff94895e33cdd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33d070 | file object: 0xffff94895e33d0f0 | offsetby: 0x80 \Windows\System32\wbem\en-US\cimwin32.dll.mui pool: 0xffff94895e33d200 | file object: 0xffff94895e33d280 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx pool: 0xffff94895e33d390 | file object: 0xffff94895e33d410 | offsetby: 0x80 \Windows\System32\wfapigp.dll pool: 0xffff94895e33d520 | file object: 0xffff94895e33d5a0 | offsetby: 0x80 \Windows\Branding\Basebrd\basebrd.dll pool: 0xffff94895e33d6b0 | file object: 0xffff94895e33d730 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33d840 | file object: 0xffff94895e33d8c0 | offsetby: 0x80 \Program Files\Windows Defender\MpAsDesc.dll pool: 0xffff94895e33d9d0 | file object: 0xffff94895e33da50 | offsetby: 0x80 \Windows\System32\perftrack.dll pool: 0xffff94895e33dcf0 | file object: 0xffff94895e33dd70 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx pool: 0xffff94895e33e010 | file object: 0xffff94895e33e090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33e1a0 | file object: 0xffff94895e33e220 | offsetby: 0x80 \Windows\System32\ncryptsslp.dll pool: 0xffff94895e33e330 | file object: 0xffff94895e33e3b0 | offsetby: 0x80 \Windows\System32\winbrand.dll pool: 0xffff94895e33e4c0 | file object: 0xffff94895e33e540 | offsetby: 0x80 \Program Files\Windows Defender\en-US\MpAsDesc.dll.mui pool: 0xffff94895e33e650 | file object: 0xffff94895e33e6d0 | offsetby: 0x80 \Program Files\Windows Defender\MpEvMsg.dll pool: 0xffff94895e33e7e0 | file object: 0xffff94895e33e860 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx pool: 0xffff94895e33e970 | file object: 0xffff94895e33e9f0 | offsetby: 0x80 \Windows\System32\wmi.dll pool: 0xffff94895e33eb00 | file object: 0xffff94895e33eb80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33ec90 | file object: 0xffff94895e33ed10 | offsetby: 0x80 \Windows\Branding\Basebrd\en-US\basebrd.dll.mui pool: 0xffff94895e33ee20 | file object: 0xffff94895e33eea0 | offsetby: 0x80 \Windows\System32\ncryptprov.dll pool: 0xffff94895e33f2d0 | file object: 0xffff94895e33f350 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33f460 | file object: 0xffff94895e33f4e0 | offsetby: 0x80 \Windows\System32\en-US\wbengine.exe.mui pool: 0xffff94895e33f5f0 | file object: 0xffff94895e33f670 | offsetby: 0x80 \Windows\System32\pcasvc.dll pool: 0xffff94895e33f780 | file object: 0xffff94895e33f800 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e33f910 | file object: 0xffff94895e33f990 | offsetby: 0x80 \Windows\System32\StorageUsage.dll pool: 0xffff94895e33faa0 | file object: 0xffff94895e33fb20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e33fc30 | file object: 0xffff94895e33fcb0 | offsetby: 0x80 \Windows\System32\srvcli.dll pool: 0xffff94895e33fdc0 | file object: 0xffff94895e33fe40 | offsetby: 0x80 \Windows\System32\schedcli.dll pool: 0xffff94895e3400e0 | file object: 0xffff94895e340160 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\MpDiag.bin pool: 0xffff94895e340270 | file object: 0xffff94895e3402f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\BBEBF2F8-0000-0000-0000-402400000000-1.bin pool: 0xffff94895e340400 | file object: 0xffff94895e340480 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpRtp.dll pool: 0xffff94895e340590 | file object: 0xffff94895e340610 | offsetby: 0x80 \Windows\System32\en-US\shsvcs.dll.mui pool: 0xffff94895e340720 | file object: 0xffff94895e3407a0 | offsetby: 0x80 \Windows\System32\en-US\pcasvc.dll.mui pool: 0xffff94895e3408b0 | file object: 0xffff94895e340930 | offsetby: 0x80 \$Directory pool: 0xffff94895e340a40 | file object: 0xffff94895e340ac0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e340bd0 | file object: 0xffff94895e340c50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e340d60 | file object: 0xffff94895e340de0 | offsetby: 0x80 \Windows\System32\wbengine.exe pool: 0xffff94895e341080 | file object: 0xffff94895e341100 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86\PrivateHost\Microsoft.VisualStudio.Validation.dll pool: 0xffff94895e341210 | file object: 0xffff94895e341290 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx pool: 0xffff94895e3413a0 | file object: 0xffff94895e341420 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpCommu.dll pool: 0xffff94895e341530 | file object: 0xffff94895e3415b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e3416c0 | file object: 0xffff94895e341740 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll pool: 0xffff94895e341850 | file object: 0xffff94895e3418d0 | offsetby: 0x80 \Windows\System32\mdmregistration.dll pool: 0xffff94895e3419e0 | file object: 0xffff94895e341a60 | offsetby: 0x80 \Windows\System32\dmcmnutils.dll pool: 0xffff94895e341b70 | file object: 0xffff94895e341bf0 | offsetby: 0x80 \Windows\System32\omadmapi.dll pool: 0xffff94895e341d00 | file object: 0xffff94895e341d80 | offsetby: 0x80 \Windows\System32\iri.dll pool: 0xffff94895e342020 | file object: 0xffff94895e3420a0 | offsetby: 0x80 \Windows\System32\Windows.StateRepositoryPS.dll pool: 0xffff94895e342340 | file object: 0xffff94895e3423c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e3424d0 | file object: 0xffff94895e342550 | offsetby: 0x80 \Windows\System32\fltLib.dll pool: 0xffff94895e342660 | file object: 0xffff94895e3426e0 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.dll pool: 0xffff94895e3427f0 | file object: 0xffff94895e342870 | offsetby: 0x80 \Windows\System32\srumsvc.dll pool: 0xffff94895e342980 | file object: 0xffff94895e342a00 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\bom-handling-84d21e0066acd184658b0d0e90324c86.code pool: 0xffff94895e342b10 | file object: 0xffff94895e342b90 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\streams-0e153b85f303271c65193cb13835b6ee.code pool: 0xffff94895e342ca0 | file object: 0xffff94895e342d20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e342e30 | file object: 0xffff94895e342eb0 | offsetby: 0x80 \Windows\SysWOW64\twinapi.dll pool: 0xffff94895e36c0d0 | file object: 0xffff94895e36c130 | offsetby: 0x60 \$PrepareToShrinkFileSize pool: 0xffff94895e36d380 | file object: 0xffff94895e36d3e0 | offsetby: 0x60 \Windows\System32\drivers\ndproxy.sys pool: 0xffff94895e36e910 | file object: 0xffff94895e36e970 | offsetby: 0x60 \Windows\System32\drivers\rassstp.sys pool: 0xffff94895e370d00 | file object: 0xffff94895e370d60 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e371e40 | file object: 0xffff94895e371ea0 | offsetby: 0x60 \Windows\System32\drivers\rasl2tp.sys pool: 0xffff94895e372570 | file object: 0xffff94895e3725d0 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e3729c0 | file object: 0xffff94895e372a20 | offsetby: 0x60 \Windows\System32\drivers\agilevpn.sys pool: 0xffff94895e3736b0 | file object: 0xffff94895e373710 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e3743a0 | file object: 0xffff94895e374400 | offsetby: 0x60 \Windows\System32\drivers\raspptp.sys pool: 0xffff94895e375370 | file object: 0xffff94895e3753d0 | offsetby: 0x60 \Windows\System32\drivers\raspppoe.sys pool: 0xffff94895e5023b0 | file object: 0xffff94895e502410 | offsetby: 0x60 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e503ab0 | file object: 0xffff94895e503b10 | offsetby: 0x60 \Windows\System32\drivers\ndiswan.sys pool: 0xffff94895e504350 | file object: 0xffff94895e5043b0 | offsetby: 0x60 \Windows\System32\drivers\ndistapi.sys pool: 0xffff94895e55a0d0 | file object: 0xffff94895e55a150 | offsetby: 0x80 \Windows\System32\vpnike.dll pool: 0xffff94895e55a260 | file object: 0xffff94895e55a2e0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e55a3f0 | file object: 0xffff94895e55a470 | offsetby: 0x80 \Windows\System32\cryptsp.dll pool: 0xffff94895e55a580 | file object: 0xffff94895e55a600 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\sbcs-data-generated-6ab6ffde6bbc0d099e08662da088e215.code pool: 0xffff94895e55a710 | file object: 0xffff94895e55a790 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.UWP.Resources.en-US.Project..vstman pool: 0xffff94895e55a8a0 | file object: 0xffff94895e55a920 | offsetby: 0x80 \Windows\System32\en-US\dps.dll.mui pool: 0xffff94895e55aa30 | file object: 0xffff94895e55aab0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e55abc0 | file object: 0xffff94895e55ac40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\MessagePack.2.x\MessagePack.dll pool: 0xffff94895e55ad50 | file object: 0xffff94895e55add0 | offsetby: 0x80 \Windows\System32\spp\store\2.0\data.dat pool: 0xffff94895e55b070 | file object: 0xffff94895e55b0f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e55b200 | file object: 0xffff94895e55b280 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Azure.Fabric.ApplicationInsights.dll pool: 0xffff94895e55b390 | file object: 0xffff94895e55b410 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\patch-core-991bc51c9a5503a3545f2167dd373c79.code pool: 0xffff94895e55b520 | file object: 0xffff94895e55b5a0 | offsetby: 0x80 \Windows\System32\rasman.dll pool: 0xffff94895e55b6b0 | file object: 0xffff94895e55b730 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55b840 | file object: 0xffff94895e55b8c0 | offsetby: 0x80 \$Directory pool: 0xffff94895e55b9d0 | file object: 0xffff94895e55ba50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55bb60 | file object: 0xffff94895e55bbe0 | offsetby: 0x80 \Windows\System32\rasapi32.dll pool: 0xffff94895e55bcf0 | file object: 0xffff94895e55bd70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Debugger.Interop.15.0.dll pool: 0xffff94895e55c010 | file object: 0xffff94895e55c090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55c1a0 | file object: 0xffff94895e55c220 | offsetby: 0x80 \Windows\System32\eappcfg.dll pool: 0xffff94895e55c330 | file object: 0xffff94895e55c3b0 | offsetby: 0x80 \Windows\System32\rastapi.dll pool: 0xffff94895e55c4c0 | file object: 0xffff94895e55c540 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55c650 | file object: 0xffff94895e55c6d0 | offsetby: 0x80 \Windows\System32\dmprocessxmlfiltered.dll pool: 0xffff94895e55c7e0 | file object: 0xffff94895e55c860 | offsetby: 0x80 \Windows\System32\cryptbase.dll pool: 0xffff94895e55c970 | file object: 0xffff94895e55c9f0 | offsetby: 0x80 \Windows\System32\dmenrollengine.dll pool: 0xffff94895e55cb00 | file object: 0xffff94895e55cb80 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-AE7DB802.pf pool: 0xffff94895e55cc90 | file object: 0xffff94895e55cd10 | offsetby: 0x80 \Windows\System32\rasppp.dll pool: 0xffff94895e55ce20 | file object: 0xffff94895e55cea0 | offsetby: 0x80 \Windows\System32\rascustom.dll pool: 0xffff94895e55d140 | file object: 0xffff94895e55d1c0 | offsetby: 0x80 \Windows\System32\PeerDistSh.dll pool: 0xffff94895e55d2d0 | file object: 0xffff94895e55d350 | offsetby: 0x80 \Windows\System32\sru\SRU.chk pool: 0xffff94895e55d460 | file object: 0xffff94895e55d4e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55d5f0 | file object: 0xffff94895e55d670 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\xterm-addon-search-2cebd51898bd34f9a5957a1c3a90ad08.code pool: 0xffff94895e55d780 | file object: 0xffff94895e55d800 | offsetby: 0x80 \Windows\System32\sru\SRU0007F.l pool: 0xffff94895e55d910 | file object: 0xffff94895e55d990 | offsetby: 0x80 \Windows\System32\icsvc.dll pool: 0xffff94895e55daa0 | file object: 0xffff94895e55db20 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895e55dc30 | file object: 0xffff94895e55dcb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55ddc0 | file object: 0xffff94895e55de40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55e0e0 | file object: 0xffff94895e55e160 | offsetby: 0x80 \Windows\System32\en-US\PeerDistSh.dll.mui pool: 0xffff94895e55e270 | file object: 0xffff94895e55e2f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e55e400 | file object: 0xffff94895e55e480 | offsetby: 0x80 \Windows\System32\en-US\diagtrack.dll.mui pool: 0xffff94895e55e590 | file object: 0xffff94895e55e610 | offsetby: 0x80 \Windows\System32\wlansvc.dll pool: 0xffff94895e55e720 | file object: 0xffff94895e55e7a0 | offsetby: 0x80 \Windows\System32\en-US\sstpsvc.dll.mui pool: 0xffff94895e55e8b0 | file object: 0xffff94895e55e930 | offsetby: 0x80 \Windows\System32\en-US\netlogon.dll.mui pool: 0xffff94895e55ea40 | file object: 0xffff94895e55eac0 | offsetby: 0x80 \Windows\System32\en-US\provsvc.dll.mui pool: 0xffff94895e55ebd0 | file object: 0xffff94895e55ec50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55ed60 | file object: 0xffff94895e55ede0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e55f080 | file object: 0xffff94895e55f100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e55f210 | file object: 0xffff94895e55f290 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e55f3a0 | file object: 0xffff94895e55f420 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e55f530 | file object: 0xffff94895e55f5b0 | offsetby: 0x80 \Windows\System32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms pool: 0xffff94895e55f6c0 | file object: 0xffff94895e55f740 | offsetby: 0x80 \Windows\System32\cscapi.dll pool: 0xffff94895e55f850 | file object: 0xffff94895e55f8d0 | offsetby: 0x80 \Windows\System32\en-US\icsvc.dll.mui pool: 0xffff94895e55f9e0 | file object: 0xffff94895e55fa60 | offsetby: 0x80 \Windows\System32\provsvc.dll pool: 0xffff94895e55fb70 | file object: 0xffff94895e55fbf0 | offsetby: 0x80 \Windows\System32\WiFiDisplay.dll pool: 0xffff94895e55fd00 | file object: 0xffff94895e55fd80 | offsetby: 0x80 \$Directory pool: 0xffff94895e560020 | file object: 0xffff94895e5600a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5601b0 | file object: 0xffff94895e560230 | offsetby: 0x80 \Windows\System32\en-US\wlansvc.dll.mui pool: 0xffff94895e560340 | file object: 0xffff94895e5603c0 | offsetby: 0x80 \Windows\System32\en-US\WiFiDisplay.dll.mui pool: 0xffff94895e5604d0 | file object: 0xffff94895e560550 | offsetby: 0x80 \Windows\System32\sru\SRU00080.l pool: 0xffff94895e560660 | file object: 0xffff94895e5606e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5607f0 | file object: 0xffff94895e560870 | offsetby: 0x80 \$Extend\$Deleted\000400000001E5BD36514864finition Updates\{45BFE74E-A0A2-4B43-B3B6-1BC0C76E3AAD}\mpasdlta.vdm pool: 0xffff94895e560980 | file object: 0xffff94895e560a00 | offsetby: 0x80 \Windows\System32\Microsoft.Bluetooth.UserService.dll pool: 0xffff94895e560b10 | file object: 0xffff94895e560b90 | offsetby: 0x80 \Windows\System32\mshtml.dll pool: 0xffff94895e560ca0 | file object: 0xffff94895e560d20 | offsetby: 0x80 \Windows\System32\AppXDeploymentServer.dll pool: 0xffff94895e560e30 | file object: 0xffff94895e560eb0 | offsetby: 0x80 \Windows\System32\dsrole.dll pool: 0xffff94895e561150 | file object: 0xffff94895e5611d0 | offsetby: 0x80 \Windows\System32\netapi32.dll pool: 0xffff94895e5612e0 | file object: 0xffff94895e561360 | offsetby: 0x80 \Windows\System32\sru\SRUDB.dat pool: 0xffff94895e561470 | file object: 0xffff94895e5614f0 | offsetby: 0x80 \Windows\System32\raschap.dll pool: 0xffff94895e561600 | file object: 0xffff94895e561680 | offsetby: 0x80 \Windows\System32\en-US\StorSvc.dll.mui pool: 0xffff94895e561790 | file object: 0xffff94895e561810 | offsetby: 0x80 \Windows\System32\MrmDeploy.dll pool: 0xffff94895e561920 | file object: 0xffff94895e5619a0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll pool: 0xffff94895e561ab0 | file object: 0xffff94895e561b30 | offsetby: 0x80 \Windows\System32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms pool: 0xffff94895e561c40 | file object: 0xffff94895e561cc0 | offsetby: 0x80 \Windows\System32\sru\SRUDB.jfm pool: 0xffff94895e561dd0 | file object: 0xffff94895e561e50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5620f0 | file object: 0xffff94895e562170 | offsetby: 0x80 \Windows\System32\sppobjs.dll pool: 0xffff94895e562280 | file object: 0xffff94895e562300 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx pool: 0xffff94895e562410 | file object: 0xffff94895e562490 | offsetby: 0x80 \$Extend\$Deleted\000400000001E5BE5BAFBEB7finition Updates\{45BFE74E-A0A2-4B43-B3B6-1BC0C76E3AAD}\mpavdlta.vdm pool: 0xffff94895e5625a0 | file object: 0xffff94895e562620 | offsetby: 0x80 \$Directory pool: 0xffff94895e562730 | file object: 0xffff94895e5627b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.Package.pkgdef pool: 0xffff94895e5628c0 | file object: 0xffff94895e562940 | offsetby: 0x80 \Windows\System32\sppwinob.dll pool: 0xffff94895e562a50 | file object: 0xffff94895e562ad0 | offsetby: 0x80 \Windows\System32\Clipc.dll pool: 0xffff94895e562be0 | file object: 0xffff94895e562c60 | offsetby: 0x80 \$Extend\$Deleted\000400000000F0B144BCDAABfinition Updates\{45BFE74E-A0A2-4B43-B3B6-1BC0C76E3AAD}\mpavbase.vdm pool: 0xffff94895e562d70 | file object: 0xffff94895e562df0 | offsetby: 0x80 \Windows\System32\en-US\AppXDeploymentServer.dll.mui pool: 0xffff94895e563090 | file object: 0xffff94895e563110 | offsetby: 0x80 \Windows\System32\spfileq.dll pool: 0xffff94895e563220 | file object: 0xffff94895e5632a0 | offsetby: 0x80 \Windows\System32\en-US\mshtml.dll.mui pool: 0xffff94895e5633b0 | file object: 0xffff94895e563430 | offsetby: 0x80 \Windows\System32\StorSvc.dll pool: 0xffff94895e563540 | file object: 0xffff94895e5635c0 | offsetby: 0x80 \Windows\System32\pkeyhelper.dll pool: 0xffff94895e5636d0 | file object: 0xffff94895e563750 | offsetby: 0x80 \System Volume Information\WPSettings.dat pool: 0xffff94895e563860 | file object: 0xffff94895e5638e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5639f0 | file object: 0xffff94895e563a70 | offsetby: 0x80 \Windows\System32\WofUtil.dll pool: 0xffff94895e563b80 | file object: 0xffff94895e563c00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.VB.ManagedCore.Project..vstman pool: 0xffff94895e563d10 | file object: 0xffff94895e563d90 | offsetby: 0x80 \Windows\System32\bcd.dll pool: 0xffff94895e564030 | file object: 0xffff94895e5640b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5641c0 | file object: 0xffff94895e564240 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\windowsTerminal-910f6c624c5520971fbaf95c69131ba6.code pool: 0xffff94895e564350 | file object: 0xffff94895e5643d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.Relational.Design.Package.pkgdef pool: 0xffff94895e5644e0 | file object: 0xffff94895e564560 | offsetby: 0x80 \$Extend\$Deleted\000400000000F0AE2AA4A86Afinition Updates\{45BFE74E-A0A2-4B43-B3B6-1BC0C76E3AAD}\mpasbase.vdm pool: 0xffff94895e564670 | file object: 0xffff94895e5646f0 | offsetby: 0x80 \Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred pool: 0xffff94895e564800 | file object: 0xffff94895e564880 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e564990 | file object: 0xffff94895e564a10 | offsetby: 0x80 \Windows\System32\SettingsHandlers_nt.dll pool: 0xffff94895e564b20 | file object: 0xffff94895e564ba0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e564cb0 | file object: 0xffff94895e564d30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e564e40 | file object: 0xffff94895e564ec0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json pool: 0xffff94895e565160 | file object: 0xffff94895e5651e0 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\XPS.Viewer~~1.0.mum pool: 0xffff94895e5652f0 | file object: 0xffff94895e565370 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e565480 | file object: 0xffff94895e565500 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.VB.ManagedCore.Resources.en-US.Project..vstman pool: 0xffff94895e565610 | file object: 0xffff94895e565690 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.VB.ManagedWeb.Project..vstman pool: 0xffff94895e5657a0 | file object: 0xffff94895e565820 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Storage.winmd pool: 0xffff94895e565930 | file object: 0xffff94895e5659b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\Microsoft.VisualStudio.Completion.Tests.dll pool: 0xffff94895e565ac0 | file object: 0xffff94895e565b40 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json pool: 0xffff94895e565c50 | file object: 0xffff94895e565cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e565de0 | file object: 0xffff94895e565e60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e566100 | file object: 0xffff94895e566180 | offsetby: 0x80 \Windows\System32\spp\store\2.0\cache\cache.dat pool: 0xffff94895e566290 | file object: 0xffff94895e566310 | offsetby: 0x80 \$Directory pool: 0xffff94895e566420 | file object: 0xffff94895e5664a0 | offsetby: 0x80 \Windows\System32\en-US\cryptsvc.dll.mui pool: 0xffff94895e5665b0 | file object: 0xffff94895e566630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e566740 | file object: 0xffff94895e5667c0 | offsetby: 0x80 \Windows\System32\en-US\taskhostw.exe.mui pool: 0xffff94895e5668d0 | file object: 0xffff94895e566950 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e566a60 | file object: 0xffff94895e566ae0 | offsetby: 0x80 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb pool: 0xffff94895e566bf0 | file object: 0xffff94895e566c70 | offsetby: 0x80 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb pool: 0xffff94895e566d80 | file object: 0xffff94895e566e00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e5670a0 | file object: 0xffff94895e567120 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\EventStore.db-shm pool: 0xffff94895e567230 | file object: 0xffff94895e5672b0 | offsetby: 0x80 \Windows\DiagTrack\RemoteAggregatorTriggerCriteria.dat pool: 0xffff94895e5673c0 | file object: 0xffff94895e567440 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895e567550 | file object: 0xffff94895e5675d0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\cversions.3.db pool: 0xffff94895e5676e0 | file object: 0xffff94895e567760 | offsetby: 0x80 \$Directory pool: 0xffff94895e567870 | file object: 0xffff94895e5678f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx pool: 0xffff94895e567a00 | file object: 0xffff94895e567a80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e567b90 | file object: 0xffff94895e567c10 | offsetby: 0x80 \Windows\DiagTrack\analyticsevents.dat pool: 0xffff94895e567d20 | file object: 0xffff94895e567da0 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895e568040 | file object: 0xffff94895e5680c0 | offsetby: 0x80 \Windows\DiagTrack\GetFileInfoActionAllowedList.dat pool: 0xffff94895e5681d0 | file object: 0xffff94895e568250 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\EventStore.db pool: 0xffff94895e568360 | file object: 0xffff94895e5683e0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db pool: 0xffff94895e5684f0 | file object: 0xffff94895e568570 | offsetby: 0x80 \Windows\System32\FlightSettings.dll pool: 0xffff94895e568680 | file object: 0xffff94895e568700 | offsetby: 0x80 \Windows\DiagTrack\GetFileActionAllowedList.dat pool: 0xffff94895e568810 | file object: 0xffff94895e568890 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-shm pool: 0xffff94895e5689a0 | file object: 0xffff94895e568a20 | offsetby: 0x80 \$Directory pool: 0xffff94895e568b30 | file object: 0xffff94895e568bb0 | offsetby: 0x80 \Windows\DiagTrack\RunExeActionAllowedList.dat pool: 0xffff94895e568cc0 | file object: 0xffff94895e568d40 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db pool: 0xffff94895e568e50 | file object: 0xffff94895e568ed0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\EventStore.db-wal pool: 0xffff94895e569170 | file object: 0xffff94895e5691f0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-wal pool: 0xffff94895e569300 | file object: 0xffff94895e569380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e569490 | file object: 0xffff94895e569510 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e569620 | file object: 0xffff94895e5696a0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-wal pool: 0xffff94895e5697b0 | file object: 0xffff94895e569830 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-shm pool: 0xffff94895e569940 | file object: 0xffff94895e5699c0 | offsetby: 0x80 \Windows\System32\wwapi.dll pool: 0xffff94895e569ad0 | file object: 0xffff94895e569b50 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e569c60 | file object: 0xffff94895e569ce0 | offsetby: 0x80 \$Directory pool: 0xffff94895e569df0 | file object: 0xffff94895e569e70 | offsetby: 0x80 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb.jfm pool: 0xffff94895e56a110 | file object: 0xffff94895e56a190 | offsetby: 0x80 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb.jfm pool: 0xffff94895e56a2a0 | file object: 0xffff94895e56a320 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56a430 | file object: 0xffff94895e56a4b0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895e56a5c0 | file object: 0xffff94895e56a640 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56a750 | file object: 0xffff94895e56a7d0 | offsetby: 0x80 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb pool: 0xffff94895e56a8e0 | file object: 0xffff94895e56a960 | offsetby: 0x80 \$Directory pool: 0xffff94895e56aa70 | file object: 0xffff94895e56aaf0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.System.winmd pool: 0xffff94895e56ac00 | file object: 0xffff94895e56ac80 | offsetby: 0x80 \Windows\System32\wpnsruprov.dll pool: 0xffff94895e56ad90 | file object: 0xffff94895e56ae10 | offsetby: 0x80 \$Directory pool: 0xffff94895e56b0b0 | file object: 0xffff94895e56b130 | offsetby: 0x80 \$Directory pool: 0xffff94895e56b240 | file object: 0xffff94895e56b2c0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Web.winmd pool: 0xffff94895e56b3d0 | file object: 0xffff94895e56b450 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56b560 | file object: 0xffff94895e56b5e0 | offsetby: 0x80 \Windows\System32\en-US\bisrv.dll.mui pool: 0xffff94895e56b6f0 | file object: 0xffff94895e56b770 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56b880 | file object: 0xffff94895e56b900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56ba10 | file object: 0xffff94895e56ba90 | offsetby: 0x80 \Windows\System32\appsruprov.dll pool: 0xffff94895e56bba0 | file object: 0xffff94895e56bc20 | offsetby: 0x80 \Windows\System32\winnlsres.dll pool: 0xffff94895e56bd30 | file object: 0xffff94895e56bdb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56c050 | file object: 0xffff94895e56c0d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56c1e0 | file object: 0xffff94895e56c260 | offsetby: 0x80 \Windows\System32\eeprov.dll pool: 0xffff94895e56c370 | file object: 0xffff94895e56c3f0 | offsetby: 0x80 \Windows\System32\nduprov.dll pool: 0xffff94895e56c500 | file object: 0xffff94895e56c580 | offsetby: 0x80 \Windows\System32\en-US\shell32.dll.mui pool: 0xffff94895e56c690 | file object: 0xffff94895e56c710 | offsetby: 0x80 \Windows\System32\vfuprov.dll pool: 0xffff94895e56c820 | file object: 0xffff94895e56c8a0 | offsetby: 0x80 \$Directory pool: 0xffff94895e56c9b0 | file object: 0xffff94895e56ca30 | offsetby: 0x80 \Windows\System32\en-US\rasmans.dll.mui pool: 0xffff94895e56cb40 | file object: 0xffff94895e56cbc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e56ccd0 | file object: 0xffff94895e56cd50 | offsetby: 0x80 \Windows\System32\en-US\wkssvc.dll.mui pool: 0xffff94895e56ce60 | file object: 0xffff94895e56cee0 | offsetby: 0x80 \Windows\System32\en-US\comres.dll.mui pool: 0xffff94895e56d180 | file object: 0xffff94895e56d200 | offsetby: 0x80 \Windows\System32\en-US\fhsvc.dll.mui pool: 0xffff94895e56d310 | file object: 0xffff94895e56d390 | offsetby: 0x80 \Windows\System32\en-US\lmhsvc.dll.mui pool: 0xffff94895e56d4a0 | file object: 0xffff94895e56d520 | offsetby: 0x80 \Windows\System32\en-US\umpnpmgr.dll.mui pool: 0xffff94895e56d630 | file object: 0xffff94895e56d6b0 | offsetby: 0x80 \Windows\System32\ClipSVC.dll pool: 0xffff94895e56d7c0 | file object: 0xffff94895e56d840 | offsetby: 0x80 \Windows\System32\en-US\semgrsvc.dll.mui pool: 0xffff94895e56d950 | file object: 0xffff94895e56d9d0 | offsetby: 0x80 \Windows\System32\en-US\ncbservice.dll.mui pool: 0xffff94895e56dae0 | file object: 0xffff94895e56db60 | offsetby: 0x80 \Windows\System32\en-US\sens.dll.mui pool: 0xffff94895e56dc70 | file object: 0xffff94895e56dcf0 | offsetby: 0x80 \Windows\System32\en-US\umpo.dll.mui pool: 0xffff94895e56de00 | file object: 0xffff94895e56de80 | offsetby: 0x80 \Windows\System32\en-US\samsrv.dll.mui pool: 0xffff94895e56e120 | file object: 0xffff94895e56e1a0 | offsetby: 0x80 \Windows\System32\en-US\DispBroker.Desktop.dll.mui pool: 0xffff94895e56e2b0 | file object: 0xffff94895e56e330 | offsetby: 0x80 \Windows\System32\en-US\wevtsvc.dll.mui pool: 0xffff94895e56e440 | file object: 0xffff94895e56e4c0 | offsetby: 0x80 \Windows\System32\en-US\profsvc.dll.mui pool: 0xffff94895e56e5d0 | file object: 0xffff94895e56e650 | offsetby: 0x80 \Windows\System32\en-US\sessenv.dll.mui pool: 0xffff94895e56e760 | file object: 0xffff94895e56e7e0 | offsetby: 0x80 \Windows\System32\en-US\debugregsvc.dll.mui pool: 0xffff94895e56e8f0 | file object: 0xffff94895e56e970 | offsetby: 0x80 \Windows\System32\en-US\dnsapi.dll.mui pool: 0xffff94895e56ea80 | file object: 0xffff94895e56eb00 | offsetby: 0x80 \Windows\System32\en-US\dhcpcore.dll.mui pool: 0xffff94895e56ec10 | file object: 0xffff94895e56ec90 | offsetby: 0x80 \Windows\System32\en-US\lsm.dll.mui pool: 0xffff94895e56eda0 | file object: 0xffff94895e56ee20 | offsetby: 0x80 \Windows\System32\en-US\nlasvc.dll.mui pool: 0xffff94895e56f0c0 | file object: 0xffff94895e56f140 | offsetby: 0x80 \Windows\System32\en-US\RpcEpMap.dll.mui pool: 0xffff94895e56f250 | file object: 0xffff94895e56f2d0 | offsetby: 0x80 \Windows\System32\en-US\schedsvc.dll.mui pool: 0xffff94895e56f3e0 | file object: 0xffff94895e56f460 | offsetby: 0x80 \Windows\System32\en-US\dusmsvc.dll.mui pool: 0xffff94895e56f570 | file object: 0xffff94895e56f5f0 | offsetby: 0x80 \Windows\System32\en-US\srvsvc.dll.mui pool: 0xffff94895e56f700 | file object: 0xffff94895e56f780 | offsetby: 0x80 \Windows\System32\en-US\nsisvc.dll.mui pool: 0xffff94895e56f890 | file object: 0xffff94895e56f910 | offsetby: 0x80 \Windows\System32\en-US\combase.dll.mui pool: 0xffff94895e56fa20 | file object: 0xffff94895e56faa0 | offsetby: 0x80 \Windows\System32\en-US\gpapi.dll.mui pool: 0xffff94895e56fbb0 | file object: 0xffff94895e56fc30 | offsetby: 0x80 \Windows\System32\en-US\clipsvc.dll.mui pool: 0xffff94895e56fd40 | file object: 0xffff94895e56fdc0 | offsetby: 0x80 \Windows\System32\en-US\FntCache.dll.mui pool: 0xffff94895e570060 | file object: 0xffff94895e5700e0 | offsetby: 0x80 \Windows\System32\en-US\usermgr.dll.mui pool: 0xffff94895e5701f0 | file object: 0xffff94895e570270 | offsetby: 0x80 \Windows\System32\en-US\trkwks.dll.mui pool: 0xffff94895e570380 | file object: 0xffff94895e570400 | offsetby: 0x80 \Windows\System32\en-US\WpdBusEnum.dll.mui pool: 0xffff94895e570510 | file object: 0xffff94895e570590 | offsetby: 0x80 \Windows\System32\ncuprov.dll pool: 0xffff94895e5706a0 | file object: 0xffff94895e570720 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\php-language-features\package.nls.json pool: 0xffff94895e570830 | file object: 0xffff94895e5708b0 | offsetby: 0x80 \Windows\servicing\Sessions\30816432_4264432168.xml pool: 0xffff94895e5709c0 | file object: 0xffff94895e570a40 | offsetby: 0x80 \$Directory pool: 0xffff94895e570b50 | file object: 0xffff94895e570bd0 | offsetby: 0x80 \Windows\System32\WaaSAssessment.dll pool: 0xffff94895e570ce0 | file object: 0xffff94895e570d60 | offsetby: 0x80 \Windows\System32\en-US\wpnservice.dll.mui pool: 0xffff94895e570e70 | file object: 0xffff94895e570ef0 | offsetby: 0x80 \Windows\System32\wlms pool: 0xffff94895e571000 | file object: 0xffff94895e571080 | offsetby: 0x80 \Windows\System32\updatepolicy.dll pool: 0xffff94895e571190 | file object: 0xffff94895e571210 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e571320 | file object: 0xffff94895e5713a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e5714b0 | file object: 0xffff94895e571530 | offsetby: 0x80 \Windows\System32\en-US\themeservice.dll.mui pool: 0xffff94895e571640 | file object: 0xffff94895e5716c0 | offsetby: 0x80 \Windows\System32\Windows.Web.dll pool: 0xffff94895e5717d0 | file object: 0xffff94895e571850 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e571960 | file object: 0xffff94895e5719e0 | offsetby: 0x80 \Windows\System32\en-US\winhttp.dll.mui pool: 0xffff94895e571af0 | file object: 0xffff94895e571b70 | offsetby: 0x80 \Windows\System32\en-US\wdi.dll.mui pool: 0xffff94895e571c80 | file object: 0xffff94895e571d00 | offsetby: 0x80 \Windows\System32\wlms\en-US\wlms.exe.mui pool: 0xffff94895e571e10 | file object: 0xffff94895e571e90 | offsetby: 0x80 \Windows\System32\en-US\Windows.Web.dll.mui pool: 0xffff94895e572130 | file object: 0xffff94895e5721b0 | offsetby: 0x80 \Windows\System32\en-US\Windows.StateRepository.dll.mui pool: 0xffff94895e5722c0 | file object: 0xffff94895e572340 | offsetby: 0x80 \Windows\System32\en-US\sysmain.dll.mui pool: 0xffff94895e572450 | file object: 0xffff94895e5724d0 | offsetby: 0x80 \Windows\System32\en-US\wuaueng.dll.mui pool: 0xffff94895e5725e0 | file object: 0xffff94895e572660 | offsetby: 0x80 \Windows\System32\wbem\en-US\WMIsvc.dll.mui pool: 0xffff94895e572770 | file object: 0xffff94895e5727f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e572900 | file object: 0xffff94895e572980 | offsetby: 0x80 \Windows\System32\en-US\TimeBrokerServer.dll.mui pool: 0xffff94895e572a90 | file object: 0xffff94895e572b10 | offsetby: 0x80 \Windows\System32\en-US\wcmsvc.dll.mui pool: 0xffff94895e572c20 | file object: 0xffff94895e572ca0 | offsetby: 0x80 \Windows\System32\en-US\SystemEventsBrokerServer.dll.mui pool: 0xffff94895e572db0 | file object: 0xffff94895e572e30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5730d0 | file object: 0xffff94895e573150 | offsetby: 0x80 \Windows\System32\globinputhost.dll pool: 0xffff94895e573260 | file object: 0xffff94895e5732e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5733f0 | file object: 0xffff94895e573470 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e573580 | file object: 0xffff94895e573600 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e573710 | file object: 0xffff94895e573790 | offsetby: 0x80 \$Directory pool: 0xffff94895e5738a0 | file object: 0xffff94895e573920 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e573a30 | file object: 0xffff94895e573ab0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Wizards\en\Microsoft.VC.Wizards.resources.dll pool: 0xffff94895e573bc0 | file object: 0xffff94895e573c40 | offsetby: 0x80 \Windows\SoftwareDistribution\Download\a75e1456b7eea7fc8bbfe9d9b17072e2\Metadata\TurboStack.dll pool: 0xffff94895e573d50 | file object: 0xffff94895e573dd0 | offsetby: 0x80 \Windows\System32\en-US\winnlsres.dll.mui pool: 0xffff94895e574070 | file object: 0xffff94895e5740f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e574200 | file object: 0xffff94895e574280 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e574390 | file object: 0xffff94895e574410 | offsetby: 0x80 \$Directory pool: 0xffff94895e574520 | file object: 0xffff94895e5745a0 | offsetby: 0x80 \$Directory pool: 0xffff94895e5746b0 | file object: 0xffff94895e574730 | offsetby: 0x80 \Windows\System32\energyprov.dll pool: 0xffff94895e574840 | file object: 0xffff94895e5748c0 | offsetby: 0x80 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb pool: 0xffff94895e5749d0 | file object: 0xffff94895e574a50 | offsetby: 0x80 \Windows\System32\en-US\winlangdb.dll.mui pool: 0xffff94895e574b60 | file object: 0xffff94895e574be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e574cf0 | file object: 0xffff94895e574d70 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_5FDD03068CBBD8A96F3AB9595BA10093 pool: 0xffff94895e575010 | file object: 0xffff94895e575090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e5751a0 | file object: 0xffff94895e575220 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e575330 | file object: 0xffff94895e5753b0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\ClipSVC\tokens.dat pool: 0xffff94895e5754c0 | file object: 0xffff94895e575540 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e575650 | file object: 0xffff94895e5756d0 | offsetby: 0x80 \Windows\System32\SleepStudy\ScreenOn\ScreenOnPowerStudyTraceSession-2020-06-03-23-20-43.etl pool: 0xffff94895e5757e0 | file object: 0xffff94895e575860 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e575970 | file object: 0xffff94895e5759f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e575b00 | file object: 0xffff94895e575b80 | offsetby: 0x80 \$Directory pool: 0xffff94895e575c90 | file object: 0xffff94895e575d10 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\promisify-3d2f693b2cac50553b0a2055913fdcb7.code pool: 0xffff94895e575e20 | file object: 0xffff94895e575ea0 | offsetby: 0x80 \Windows\System32\Winlangdb.dll pool: 0xffff94895e576140 | file object: 0xffff94895e5761c0 | offsetby: 0x80 \Windows\SystemResources\Winlangdb.dll.mun pool: 0xffff94895e5762d0 | file object: 0xffff94895e576350 | offsetby: 0x80 \Windows\SystemResources\imageres.dll.mun pool: 0xffff94895e576460 | file object: 0xffff94895e5764e0 | offsetby: 0x80 \Windows\System32\InputSwitch.dll pool: 0xffff94895e5765f0 | file object: 0xffff94895e576670 | offsetby: 0x80 \$Directory pool: 0xffff94895e576780 | file object: 0xffff94895e576800 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e576910 | file object: 0xffff94895e576990 | offsetby: 0x80 \Windows\System32\en-US\InputSwitch.dll.mui pool: 0xffff94895e576aa0 | file object: 0xffff94895e576b20 | offsetby: 0x80 \Windows\System32\AuthExt.dll pool: 0xffff94895e576c30 | file object: 0xffff94895e576cb0 | offsetby: 0x80 \Windows\System32\en-US\Windows.Graphics.dll.mui pool: 0xffff94895e576dc0 | file object: 0xffff94895e576e40 | offsetby: 0x80 \Windows\System32\credprovs.dll pool: 0xffff94895e5770e0 | file object: 0xffff94895e577160 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c\comctl32.dll pool: 0xffff94895e577270 | file object: 0xffff94895e5772f0 | offsetby: 0x80 \Windows\System32\credprovhost.dll pool: 0xffff94895e577400 | file object: 0xffff94895e577480 | offsetby: 0x80 \Windows\System32\en-US\batmeter.dll.mui pool: 0xffff94895e577590 | file object: 0xffff94895e577610 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e577720 | file object: 0xffff94895e5777a0 | offsetby: 0x80 \Windows\System32\wuceffects.dll pool: 0xffff94895e5778b0 | file object: 0xffff94895e577930 | offsetby: 0x80 \Windows\System32\input.dll pool: 0xffff94895e577a40 | file object: 0xffff94895e577ac0 | offsetby: 0x80 \Windows\System32\batmeter.dll pool: 0xffff94895e577bd0 | file object: 0xffff94895e577c50 | offsetby: 0x80 \Windows\System32\CredProvDataModel.dll pool: 0xffff94895e577d60 | file object: 0xffff94895e577de0 | offsetby: 0x80 \Windows\System32\FontGlyphAnimator.dll pool: 0xffff94895e578080 | file object: 0xffff94895e578100 | offsetby: 0x80 \Windows\SysWOW64\sxs.dll pool: 0xffff94895e578210 | file object: 0xffff94895e578290 | offsetby: 0x80 \Windows\System32\credprovslegacy.dll pool: 0xffff94895e5783a0 | file object: 0xffff94895e578420 | offsetby: 0x80 \Windows\System32\en-US\input.dll.mui pool: 0xffff94895e578530 | file object: 0xffff94895e5785b0 | offsetby: 0x80 \Windows\WindowsShell.Manifest pool: 0xffff94895e5786c0 | file object: 0xffff94895e578740 | offsetby: 0x80 \Windows\System32\wininet.dll pool: 0xffff94895e578850 | file object: 0xffff94895e5788d0 | offsetby: 0x80 \Windows\System32\en-US\AuthExt.dll.mui pool: 0xffff94895e5789e0 | file object: 0xffff94895e578a60 | offsetby: 0x80 \Windows\System32\NetworkStatus.dll pool: 0xffff94895e578b70 | file object: 0xffff94895e578bf0 | offsetby: 0x80 \Windows\System32\threadpoolwinrt.dll pool: 0xffff94895e578d00 | file object: 0xffff94895e578d80 | offsetby: 0x80 \ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___1920_1015_notdimmed.jpg pool: 0xffff94895e579020 | file object: 0xffff94895e5790a0 | offsetby: 0x80 \Windows\SystemResources\batmeter.dll.mun pool: 0xffff94895e5791b0 | file object: 0xffff94895e579230 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e579340 | file object: 0xffff94895e5793c0 | offsetby: 0x80 \Windows\System32\imageres.dll pool: 0xffff94895e5794d0 | file object: 0xffff94895e579550 | offsetby: 0x80 \Windows\System32\SebBackgroundManagerPolicy.dll pool: 0xffff94895e579660 | file object: 0xffff94895e5796e0 | offsetby: 0x80 \Windows\System32\facecredentialprovider.dll pool: 0xffff94895e5797f0 | file object: 0xffff94895e579870 | offsetby: 0x80 \Windows\System32\StructuredQuery.dll pool: 0xffff94895e579980 | file object: 0xffff94895e579a00 | offsetby: 0x80 \$Directory pool: 0xffff94895e579b10 | file object: 0xffff94895e579b90 | offsetby: 0x80 \Windows\System32\en-US\credprovs.dll.mui pool: 0xffff94895e579ca0 | file object: 0xffff94895e579d20 | offsetby: 0x80 \Windows\System32\Windows.Devices.Enumeration.dll pool: 0xffff94895e579e30 | file object: 0xffff94895e579eb0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.ApplicationModel.winmd pool: 0xffff94895e8444f0 | file object: 0xffff94895e844550 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846040 | file object: 0xffff94895e8460a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8461b0 | file object: 0xffff94895e846210 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846320 | file object: 0xffff94895e846380 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846490 | file object: 0xffff94895e8464f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846600 | file object: 0xffff94895e846660 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846770 | file object: 0xffff94895e8467d0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8468e0 | file object: 0xffff94895e846940 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846a50 | file object: 0xffff94895e846ab0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846bc0 | file object: 0xffff94895e846c20 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e846d30 | file object: 0xffff94895e846d90 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847010 | file object: 0xffff94895e847070 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847180 | file object: 0xffff94895e8471e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8472f0 | file object: 0xffff94895e847350 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847460 | file object: 0xffff94895e8474c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8475d0 | file object: 0xffff94895e847630 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847740 | file object: 0xffff94895e8477a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8478b0 | file object: 0xffff94895e847910 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847a20 | file object: 0xffff94895e847a80 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847b90 | file object: 0xffff94895e847bf0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847d00 | file object: 0xffff94895e847d60 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e847e70 | file object: 0xffff94895e847ed0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848150 | file object: 0xffff94895e8481b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8482c0 | file object: 0xffff94895e848320 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848430 | file object: 0xffff94895e848490 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8485a0 | file object: 0xffff94895e848600 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848710 | file object: 0xffff94895e848770 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848880 | file object: 0xffff94895e8488e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8489f0 | file object: 0xffff94895e848a50 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848b60 | file object: 0xffff94895e848bc0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848cd0 | file object: 0xffff94895e848d30 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e848e40 | file object: 0xffff94895e848ea0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849120 | file object: 0xffff94895e849180 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849290 | file object: 0xffff94895e8492f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849400 | file object: 0xffff94895e849460 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849570 | file object: 0xffff94895e8495d0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8496e0 | file object: 0xffff94895e849740 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849850 | file object: 0xffff94895e8498b0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e8499c0 | file object: 0xffff94895e849a20 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849b30 | file object: 0xffff94895e849b90 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849ca0 | file object: 0xffff94895e849d00 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e849e10 | file object: 0xffff94895e849e70 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a0f0 | file object: 0xffff94895e84a150 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a260 | file object: 0xffff94895e84a2c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a3d0 | file object: 0xffff94895e84a430 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a540 | file object: 0xffff94895e84a5a0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a6b0 | file object: 0xffff94895e84a710 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a820 | file object: 0xffff94895e84a880 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84a990 | file object: 0xffff94895e84a9f0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84ab00 | file object: 0xffff94895e84ab60 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84ac70 | file object: 0xffff94895e84acd0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84ade0 | file object: 0xffff94895e84ae40 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b0c0 | file object: 0xffff94895e84b120 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b230 | file object: 0xffff94895e84b290 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b3a0 | file object: 0xffff94895e84b400 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b510 | file object: 0xffff94895e84b570 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b680 | file object: 0xffff94895e84b6e0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b7f0 | file object: 0xffff94895e84b850 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84b960 | file object: 0xffff94895e84b9c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84c4e0 | file object: 0xffff94895e84c540 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR.1.regtrans-ms pool: 0xffff94895e84d620 | file object: 0xffff94895e84d680 | offsetby: 0x60 \SystemRoot\System32\Config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR pool: 0xffff94895e84d900 | file object: 0xffff94895e84d960 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84da70 | file object: 0xffff94895e84dad0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84dd50 | file object: 0xffff94895e84ddb0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84e1a0 | file object: 0xffff94895e84e200 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84e310 | file object: 0xffff94895e84e370 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR.blf pool: 0xffff94895e84e5f0 | file object: 0xffff94895e84e650 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR.0.regtrans-ms pool: 0xffff94895e84e760 | file object: 0xffff94895e84e7c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e84f450 | file object: 0xffff94895e84f4b0 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR.2.regtrans-ms pool: 0xffff94895e84fe60 | file object: 0xffff94895e84fec0 | offsetby: 0x60 \Windows\System32\config\TxR\{fd9a35aa-49fe-11e9-aa2c-248a07783950}.TxR.3.regtrans-ms pool: 0xffff94895e851560 | file object: 0xffff94895e8515c0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895e853390 | file object: 0xffff94895e8533f0 | offsetby: 0x60 \$ConvertToNonresident pool: 0xffff94895e854080 | file object: 0xffff94895e8540e0 | offsetby: 0x60 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl pool: 0xffff94895e8575b0 | file object: 0xffff94895e857610 | offsetby: 0x60 \$PrepareToShrinkFileSize pool: 0xffff94895e8640d0 | file object: 0xffff94895e864150 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e864260 | file object: 0xffff94895e8642e0 | offsetby: 0x80 \Windows\System32\cxcredprov.dll pool: 0xffff94895e8643f0 | file object: 0xffff94895e864470 | offsetby: 0x80 壟퍱&䕆呁剕彅呈偔啟䕓乒䵁彅䅐卓佗 pool: 0xffff94895e864580 | file object: 0xffff94895e864600 | offsetby: 0x80 \Windows\System32\en-US\FirewallControlPanel.dll.mui pool: 0xffff94895e864710 | file object: 0xffff94895e864790 | offsetby: 0x80 \Windows\System32\radardt.dll pool: 0xffff94895e8648a0 | file object: 0xffff94895e864920 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e864a30 | file object: 0xffff94895e864ab0 | offsetby: 0x80 \Windows\System32\rasplap.dll pool: 0xffff94895e864bc0 | file object: 0xffff94895e864c40 | offsetby: 0x80 \Windows\System32\BioCredProv.dll pool: 0xffff94895e864d50 | file object: 0xffff94895e864dd0 | offsetby: 0x80 \Windows\System32\CredProv2faHelper.dll pool: 0xffff94895e865070 | file object: 0xffff94895e8650f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e865200 | file object: 0xffff94895e865280 | offsetby: 0x80 \Windows\System32\MSWB7.dll pool: 0xffff94895e865390 | file object: 0xffff94895e865410 | offsetby: 0x80 \Windows\System32\DevDispItemProvider.dll pool: 0xffff94895e865520 | file object: 0xffff94895e8655a0 | offsetby: 0x80 \Windows\System32\ngccredprov.dll pool: 0xffff94895e8656b0 | file object: 0xffff94895e865730 | offsetby: 0x80 \Windows\System32\D3D12.dll pool: 0xffff94895e865840 | file object: 0xffff94895e8658c0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\L.User.cdp pool: 0xffff94895e8659d0 | file object: 0xffff94895e865a50 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx pool: 0xffff94895e865b60 | file object: 0xffff94895e865be0 | offsetby: 0x80 \Windows\System32\prm0009.dll pool: 0xffff94895e865cf0 | file object: 0xffff94895e865d70 | offsetby: 0x80 \Windows\System32\RTWorkQ.dll pool: 0xffff94895e866010 | file object: 0xffff94895e866090 | offsetby: 0x80 \Windows\System32\ngckeyenum.dll pool: 0xffff94895e8661a0 | file object: 0xffff94895e866220 | offsetby: 0x80 \Windows\Prefetch\SGRMBROKER.EXE-0CA31CC6.pf pool: 0xffff94895e866330 | file object: 0xffff94895e8663b0 | offsetby: 0x80 \Windows\System32\Windows.Media.dll pool: 0xffff94895e8664c0 | file object: 0xffff94895e866540 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin pool: 0xffff94895e866650 | file object: 0xffff94895e8666d0 | offsetby: 0x80 \Windows\System32\wlidcredprov.dll pool: 0xffff94895e8667e0 | file object: 0xffff94895e866860 | offsetby: 0x80 \Windows\INF\swenum.PNF pool: 0xffff94895e866970 | file object: 0xffff94895e8669f0 | offsetby: 0x80 \Windows\System32\SmartcardCredentialProvider.dll pool: 0xffff94895e866b00 | file object: 0xffff94895e866b80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e866c90 | file object: 0xffff94895e866d10 | offsetby: 0x80 \Windows\System32\FirewallControlPanel.dll pool: 0xffff94895e866e20 | file object: 0xffff94895e866ea0 | offsetby: 0x80 \Windows\System32\wosc.dll pool: 0xffff94895e867140 | file object: 0xffff94895e8671c0 | offsetby: 0x80 \Windows\System32\CredProvHelper.dll pool: 0xffff94895e8672d0 | file object: 0xffff94895e867350 | offsetby: 0x80 \$Directory pool: 0xffff94895e867460 | file object: 0xffff94895e8674e0 | offsetby: 0x80 \Windows\System32\fveui.dll pool: 0xffff94895e8675f0 | file object: 0xffff94895e867670 | offsetby: 0x80 \Windows\System32\en-US\NgcRecovery.dll.mui pool: 0xffff94895e867780 | file object: 0xffff94895e867800 | offsetby: 0x80 \Windows\System32\PhotoMetadataHandler.dll pool: 0xffff94895e867910 | file object: 0xffff94895e867990 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.DIAGNOSTICS.xml pool: 0xffff94895e867aa0 | file object: 0xffff94895e867b20 | offsetby: 0x80 \Windows\System32\WindowsPowerShell\v1.0\en-US\powershell.exe.mui pool: 0xffff94895e867c30 | file object: 0xffff94895e867cb0 | offsetby: 0x80 \Windows\System32\en-US\ci.dll.mui pool: 0xffff94895e867dc0 | file object: 0xffff94895e867e40 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895e8680e0 | file object: 0xffff94895e868160 | offsetby: 0x80 \Windows\System32\SecureTimeAggregator.dll pool: 0xffff94895e868270 | file object: 0xffff94895e8682f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e868400 | file object: 0xffff94895e868480 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\parse.dat pool: 0xffff94895e868590 | file object: 0xffff94895e868610 | offsetby: 0x80 \Windows\System32\en-US\fveui.dll.mui pool: 0xffff94895e868720 | file object: 0xffff94895e8687a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e8688b0 | file object: 0xffff94895e868930 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat pool: 0xffff94895e868a40 | file object: 0xffff94895e868ac0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx pool: 0xffff94895e868bd0 | file object: 0xffff94895e868c50 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895e868d60 | file object: 0xffff94895e868de0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.SIUF.xml pool: 0xffff94895e869080 | file object: 0xffff94895e869100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e869210 | file object: 0xffff94895e869290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e8693a0 | file object: 0xffff94895e869420 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx pool: 0xffff94895e869530 | file object: 0xffff94895e8695b0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx pool: 0xffff94895e8696c0 | file object: 0xffff94895e869740 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKESCALATIONS.xml pool: 0xffff94895e869850 | file object: 0xffff94895e8698d0 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKPOINTDATA.xml pool: 0xffff94895e8699e0 | file object: 0xffff94895e869a60 | offsetby: 0x80 \Windows\System32\IDStore.dll pool: 0xffff94895e869b70 | file object: 0xffff94895e869bf0 | offsetby: 0x80 \Windows\System32\en-US\dnsapi.dll.mui pool: 0xffff94895e869d00 | file object: 0xffff94895e869d80 | offsetby: 0x80 \Windows\System32\WindowsPowerShell\v1.0\powershell.exe pool: 0xffff94895e86a020 | file object: 0xffff94895e86a0a0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895e86a1b0 | file object: 0xffff94895e86a230 | offsetby: 0x80 \Windows\System32\ngcrecovery.dll pool: 0xffff94895e86a340 | file object: 0xffff94895e86a3c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e86a4d0 | file object: 0xffff94895e86a550 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.ProjectSystem.Full,version=16.6.213.44640\_package.json pool: 0xffff94895e86a660 | file object: 0xffff94895e86a6e0 | offsetby: 0x80 \Windows\SoftwareDistribution\ReportingEvents.log pool: 0xffff94895e86a7f0 | file object: 0xffff94895e86a870 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.VisualBasic.dll pool: 0xffff94895e86a980 | file object: 0xffff94895e86aa00 | offsetby: 0x80 \Windows\System32\SyncInfrastructure.dll pool: 0xffff94895e86ab10 | file object: 0xffff94895e86ab90 | offsetby: 0x80 \ProgramData\Microsoft\Windows\OneSettings\config.json pool: 0xffff94895e86aca0 | file object: 0xffff94895e86ad20 | offsetby: 0x80 \$Directory pool: 0xffff94895e86ae30 | file object: 0xffff94895e86aeb0 | offsetby: 0x80 \$Directory pool: 0xffff94895e86b150 | file object: 0xffff94895e86b1d0 | offsetby: 0x80 \Windows\System32\wuapi.dll pool: 0xffff94895e86b2e0 | file object: 0xffff94895e86b360 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e86b470 | file object: 0xffff94895e86b4f0 | offsetby: 0x80 \Windows\System32\winbio.dll pool: 0xffff94895e86b600 | file object: 0xffff94895e86b680 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86b790 | file object: 0xffff94895e86b810 | offsetby: 0x80 \Windows\System32\dusmapi.dll pool: 0xffff94895e86b920 | file object: 0xffff94895e86b9a0 | offsetby: 0x80 \Windows\System32\wuauclt.exe pool: 0xffff94895e86bab0 | file object: 0xffff94895e86bb30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86bc40 | file object: 0xffff94895e86bcc0 | offsetby: 0x80 \Windows\System32\wuaueng.dll pool: 0xffff94895e86bdd0 | file object: 0xffff94895e86be50 | offsetby: 0x80 \Windows\System32\wbem\wmipcima.dll pool: 0xffff94895e86c0f0 | file object: 0xffff94895e86c170 | offsetby: 0x80 \Windows\Fonts\segoeuil.ttf pool: 0xffff94895e86c280 | file object: 0xffff94895e86c300 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Resources.Common.dll pool: 0xffff94895e86c410 | file object: 0xffff94895e86c490 | offsetby: 0x80 \Windows\System32\en-US\windows.ui.xaml.dll.mui pool: 0xffff94895e86c5a0 | file object: 0xffff94895e86c620 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{DE23FAB5-9CC8-4BFA-A543-E98ADBFB59D4}.catalogItem pool: 0xffff94895e86c730 | file object: 0xffff94895e86c7b0 | offsetby: 0x80 \Windows\System32\wuuhext.dll pool: 0xffff94895e86c8c0 | file object: 0xffff94895e86c940 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86ca50 | file object: 0xffff94895e86cad0 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\MessageData-3802a37bceb4718e3ee7b129f5824690.codeip pool: 0xffff94895e86cbe0 | file object: 0xffff94895e86cc60 | offsetby: 0x80 \Windows\System32\msxml6.dll pool: 0xffff94895e86cd70 | file object: 0xffff94895e86cdf0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86d090 | file object: 0xffff94895e86d110 | offsetby: 0x80 \Windows\System32\Windows.Networking.Connectivity.dll pool: 0xffff94895e86d220 | file object: 0xffff94895e86d2a0 | offsetby: 0x80 \Windows\System32\wuuhosdeployment.dll pool: 0xffff94895e86d3b0 | file object: 0xffff94895e86d430 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86d540 | file object: 0xffff94895e86d5c0 | offsetby: 0x80 \Windows\System32\msxml6r.dll pool: 0xffff94895e86d6d0 | file object: 0xffff94895e86d750 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\6649bcffbc96cc74b5993794d96425d74efbfe31 pool: 0xffff94895e86d860 | file object: 0xffff94895e86d8e0 | offsetby: 0x80 \$Directory pool: 0xffff94895e86d9f0 | file object: 0xffff94895e86da70 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\08682483de75936d3ce4c934b6b68918d0cc081e pool: 0xffff94895e86db80 | file object: 0xffff94895e86dc00 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\65b16f3b35ac46b965ab559b8b0f80adf7c0a69e pool: 0xffff94895e86dd10 | file object: 0xffff94895e86dd90 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\14f11893d43da7ec2888e5fba5c4d175cf6a1081 pool: 0xffff94895e86e030 | file object: 0xffff94895e86e0b0 | offsetby: 0x80 \Windows\SysWOW64\user32.dll pool: 0xffff94895e86e1c0 | file object: 0xffff94895e86e240 | offsetby: 0x80 \Windows\SysWOW64\mshtml.dll pool: 0xffff94895e86e350 | file object: 0xffff94895e86e3d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\9a3c75e9f484283f4348eb840d3273afa88743a5 pool: 0xffff94895e86e4e0 | file object: 0xffff94895e86e560 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db pool: 0xffff94895e86e670 | file object: 0xffff94895e86e6f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-HelloForBusiness%4Operational.evtx pool: 0xffff94895e86e800 | file object: 0xffff94895e86e880 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e86e990 | file object: 0xffff94895e86ea10 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\vrYtZwzZ6iVXfSzEvX8wZMKKACQ[1].css pool: 0xffff94895e86eb20 | file object: 0xffff94895e86eba0 | offsetby: 0x80 \Windows\System32\cryptnet.dll pool: 0xffff94895e86ecb0 | file object: 0xffff94895e86ed30 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\ff2ad53ff238ea9589cd142dec338f965e821c63 pool: 0xffff94895e86ee40 | file object: 0xffff94895e86eec0 | offsetby: 0x80 \$Directory pool: 0xffff94895e86f160 | file object: 0xffff94895e86f1e0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx pool: 0xffff94895e86f2f0 | file object: 0xffff94895e86f370 | offsetby: 0x80 \$Directory pool: 0xffff94895e86f480 | file object: 0xffff94895e86f500 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx pool: 0xffff94895e86f610 | file object: 0xffff94895e86f690 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\928957ba2f93f4e736e05214b35eee5f48866dbd pool: 0xffff94895e86f7a0 | file object: 0xffff94895e86f820 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\5a1e1e62547ee9bfbc12cfb2d8b969debe98af3f pool: 0xffff94895e86f930 | file object: 0xffff94895e86f9b0 | offsetby: 0x80 \Windows\SysWOW64\gdi32.dll pool: 0xffff94895e86fac0 | file object: 0xffff94895e86fb40 | offsetby: 0x80 \Windows\System32\DeviceCredential.dll pool: 0xffff94895e86fc50 | file object: 0xffff94895e86fcd0 | offsetby: 0x80 \Windows\SysWOW64\kernel32.dll pool: 0xffff94895e86fde0 | file object: 0xffff94895e86fe60 | offsetby: 0x80 \$Directory pool: 0xffff94895e870100 | file object: 0xffff94895e870180 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\55726153163cff6ef729e0c81099ff734c5cac7e pool: 0xffff94895e870290 | file object: 0xffff94895e870310 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e870420 | file object: 0xffff94895e8704a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e8705b0 | file object: 0xffff94895e870630 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\dbcs-data-71ef95931dd7bd96b3309249704ed46d.codedel pool: 0xffff94895e870740 | file object: 0xffff94895e8707c0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vf5c84124#\12f8a0c30f3f1d9794020c141ff51dd3\Microsoft.VisualStudio.Language.StandardClassification.ni.dll pool: 0xffff94895e8708d0 | file object: 0xffff94895e870950 | offsetby: 0x80 \Windows\System32\SensorsClassExtension.dll pool: 0xffff94895e870a60 | file object: 0xffff94895e870ae0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLCommon\150\Microsoft.VisualStudio.Data.Tools.SqlCommonPackage.pkgdef pool: 0xffff94895e870bf0 | file object: 0xffff94895e870c70 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpAsDesc.dll pool: 0xffff94895e870d80 | file object: 0xffff94895e870e00 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\en-US\mpasdesc.dll.mui pool: 0xffff94895e8710a0 | file object: 0xffff94895e871120 | offsetby: 0x80 \$Directory pool: 0xffff94895e871230 | file object: 0xffff94895e8712b0 | offsetby: 0x80 \$Directory pool: 0xffff94895e8713c0 | file object: 0xffff94895e871440 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\f97bbf8b5f6e5e86dc4b6e8964b2aad1b38d48d2 pool: 0xffff94895e871550 | file object: 0xffff94895e8715d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\d9bc0b64a909964ef3847999724e71b4e4689e0b pool: 0xffff94895e8716e0 | file object: 0xffff94895e871760 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\7989b71c994d8d3767b8896aaca972aea7c67ef4 pool: 0xffff94895e871870 | file object: 0xffff94895e8718f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\5bc22bdbb24836abc15ebf79e4b248e505e09e1e pool: 0xffff94895e871a00 | file object: 0xffff94895e871a80 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\0538c6be2c2b295ff70dc5001a07b3a84f90dde9 pool: 0xffff94895e871b90 | file object: 0xffff94895e871c10 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\b1c1e95aeca120092be61ed07c376edb7df41eb2 pool: 0xffff94895e871d20 | file object: 0xffff94895e871da0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\e0a12eb9d9e3293784def44dd375abfc487d00b7 pool: 0xffff94895e872040 | file object: 0xffff94895e8720c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\7adfc04113b4f32893c7f45f3e0902a40bea51e2 pool: 0xffff94895e8721d0 | file object: 0xffff94895e872250 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\9df72f9442839543bcfcfd77ea51998e6d5facec pool: 0xffff94895e872360 | file object: 0xffff94895e8723e0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\9959e503190b4c738bb263399a3f77d19fcf44f6 pool: 0xffff94895e8724f0 | file object: 0xffff94895e872570 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\169ef87ec147da0e7e2d6fbd55c4c7f1e75bfdc0 pool: 0xffff94895e872680 | file object: 0xffff94895e872700 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\f4dd8063d7f11ac6240b4535021450d5131c2d71 pool: 0xffff94895e872810 | file object: 0xffff94895e872890 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\edf238a1f3872c9bf686da657507b387cf1e60b9 pool: 0xffff94895e8729a0 | file object: 0xffff94895e872a20 | offsetby: 0x80 Ő̐䵘薲舎￿阸计舎￿幽钉￿錠惸钉￿倀x|€鋐计舎￿..鋐计舎￿\Device\HarddiskVolume2\Windows\System32\en-US\shell32.dl pool: 0xffff94895e872b30 | file object: 0xffff94895e872bb0 | offsetby: 0x80 Ő˸⯘讣舎￿␠愕钉￿ೀ恳钉￿退xd€Ⲑ讣舎￿..Ⲑ讣舎￿\Device\HarddiskVolume2\Windows\Fonts\segoeuiz.ttfx.nodell pool: 0xffff94895e872cc0 | file object: 0xffff94895e872d40 | offsetby: 0x80 \Windows\System32\en-US\wscsvc.dll.mui pool: 0xffff94895e872e50 | file object: 0xffff94895e872ed0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\bc824d75fddea791959c5f9fd6dc56addd6df9ab pool: 0xffff94895e873170 | file object: 0xffff94895e8731f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\34b5c901257e67c4a343f28f82aacaab497158ca pool: 0xffff94895e873300 | file object: 0xffff94895e873380 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\8hRsu9RXyJK71Ev1LywFHOSyrBA[1].css pool: 0xffff94895e873490 | file object: 0xffff94895e873510 | offsetby: 0x80 \Windows\System32\wscsvc.dll pool: 0xffff94895e873620 | file object: 0xffff94895e8736a0 | offsetby: 0x80 \$Directory pool: 0xffff94895e8737b0 | file object: 0xffff94895e873830 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\0a7a7b5c39f0feb5ba974681825f5a496cbffdbd pool: 0xffff94895e873940 | file object: 0xffff94895e8739c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\RtSigs\Data\06581cc3ac6109beebfd1a030b4189fb6cd0d9bb pool: 0xffff94895e873ad0 | file object: 0xffff94895e873b50 | offsetby: 0x80 \Users\User\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms pool: 0xffff94895e873c60 | file object: 0xffff94895e873ce0 | offsetby: 0x80 \Windows\System32\WsmAuto.dll pool: 0xffff94895e873df0 | file object: 0xffff94895e873e70 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.UI.winmd pool: 0xffff94895e874110 | file object: 0xffff94895e874190 | offsetby: 0x80 \Windows\System32\SystemSettings.DataModel.dll pool: 0xffff94895e8742a0 | file object: 0xffff94895e874320 | offsetby: 0x80 \Windows\System32\microsoft-windows-system-events.dll pool: 0xffff94895e874430 | file object: 0xffff94895e8744b0 | offsetby: 0x80 \Windows\System32\adtschema.dll pool: 0xffff94895e8745c0 | file object: 0xffff94895e874640 | offsetby: 0x80 \Users\User\ntuser.dat.LOG1 pool: 0xffff94895e874750 | file object: 0xffff94895e8747d0 | offsetby: 0x80 \Users\User\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM.blf pool: 0xffff94895e8748e0 | file object: 0xffff94895e874960 | offsetby: 0x80 \Users\User\NTUSER.DAT pool: 0xffff94895e874a70 | file object: 0xffff94895e874af0 | offsetby: 0x80 \Windows\System32\wbem\WinMgmtR.dll pool: 0xffff94895e874c00 | file object: 0xffff94895e874c80 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat pool: 0xffff94895e874d90 | file object: 0xffff94895e874e10 | offsetby: 0x80 \Users\User\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms pool: 0xffff94895e8750b0 | file object: 0xffff94895e875130 | offsetby: 0x80 \Windows\System32\wevtsvc.dll pool: 0xffff94895e875240 | file object: 0xffff94895e8752c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.Package.SqlProfile.pkgdef pool: 0xffff94895e8753d0 | file object: 0xffff94895e875450 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e875560 | file object: 0xffff94895e8755e0 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895e8756f0 | file object: 0xffff94895e875770 | offsetby: 0x80 \$Directory pool: 0xffff94895e875880 | file object: 0xffff94895e875900 | offsetby: 0x80 \ProgramData\Microsoft\Diagnosis\Sideload pool: 0xffff94895e875a10 | file object: 0xffff94895e875a90 | offsetby: 0x80 \$ConvertToNonresident pool: 0xffff94895e875ba0 | file object: 0xffff94895e875c20 | offsetby: 0x80 \Windows\System32\en-US\microsoft-windows-system-events.dll.mui pool: 0xffff94895e875d30 | file object: 0xffff94895e875db0 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll pool: 0xffff94895e876050 | file object: 0xffff94895e8760d0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx pool: 0xffff94895e8761e0 | file object: 0xffff94895e876260 | offsetby: 0x80 \Windows\System32\wscapi.dll pool: 0xffff94895e876370 | file object: 0xffff94895e8763f0 | offsetby: 0x80 \Windows\System32\wbem\en-US\WinMgmtR.dll.mui pool: 0xffff94895e876500 | file object: 0xffff94895e876580 | offsetby: 0x80 \Windows\System32\en-US\adtschema.dll.mui pool: 0xffff94895e876690 | file object: 0xffff94895e876710 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx pool: 0xffff94895e876820 | file object: 0xffff94895e8768a0 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM pool: 0xffff94895e8769b0 | file object: 0xffff94895e876a30 | offsetby: 0x80 \Windows\System32\win32kbase.sys pool: 0xffff94895e876b40 | file object: 0xffff94895e876bc0 | offsetby: 0x80 \Users\User\ntuser.dat.LOG2 pool: 0xffff94895e876cd0 | file object: 0xffff94895e876d50 | offsetby: 0x80 \ProgramData\Microsoft\Windows\OneSettings\CTAC.json pool: 0xffff94895e876e60 | file object: 0xffff94895e876ee0 | offsetby: 0x80 \$Directory pool: 0xffff94895e877180 | file object: 0xffff94895e877200 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e877310 | file object: 0xffff94895e877390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e8774a0 | file object: 0xffff94895e877520 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e877630 | file object: 0xffff94895e8776b0 | offsetby: 0x80 \Windows\appcompat\Programs\Amcache.hve.LOG1 pool: 0xffff94895e8777c0 | file object: 0xffff94895e877840 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e877950 | file object: 0xffff94895e8779d0 | offsetby: 0x80 \Windows\System32\srumapi.dll pool: 0xffff94895e877ae0 | file object: 0xffff94895e877b60 | offsetby: 0x80 \$Directory pool: 0xffff94895e877c70 | file object: 0xffff94895e877cf0 | offsetby: 0x80 \Windows\System32\Windows.CloudStore.dll pool: 0xffff94895e877e00 | file object: 0xffff94895e877e80 | offsetby: 0x80 \Windows\System32\aepic.dll pool: 0xffff94895e878120 | file object: 0xffff94895e8781a0 | offsetby: 0x80 \Windows\appcompat\Programs\Amcache.hve.LOG2 pool: 0xffff94895e8782b0 | file object: 0xffff94895e878330 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\E7FXakBj8G9LXNbpOThzxq0XBvI[1].css pool: 0xffff94895e878440 | file object: 0xffff94895e8784c0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 pool: 0xffff94895e8785d0 | file object: 0xffff94895e878650 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e878760 | file object: 0xffff94895e8787e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 pool: 0xffff94895e8788f0 | file object: 0xffff94895e878970 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat{5a434228-7db9-11ea-9ed8-00155d24f4a5}.TM.blf pool: 0xffff94895e878a80 | file object: 0xffff94895e878b00 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat{5a434228-7db9-11ea-9ed8-00155d24f4a5}.TMContainer00000000000000000001.regtrans-ms pool: 0xffff94895e878c10 | file object: 0xffff94895e878c90 | offsetby: 0x80 \Windows\appcompat\Programs\Amcache.hve pool: 0xffff94895e878da0 | file object: 0xffff94895e878e20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e8790c0 | file object: 0xffff94895e879140 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat{5a434228-7db9-11ea-9ed8-00155d24f4a5}.TMContainer00000000000000000002.regtrans-ms pool: 0xffff94895e879250 | file object: 0xffff94895e8792d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e8793e0 | file object: 0xffff94895e879460 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895e879570 | file object: 0xffff94895e8795f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e879700 | file object: 0xffff94895e879780 | offsetby: 0x80 \Windows\System32\en-US\smss.exe.mui pool: 0xffff94895e879890 | file object: 0xffff94895e879910 | offsetby: 0x80 \$Directory pool: 0xffff94895e879a20 | file object: 0xffff94895e879aa0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e879bb0 | file object: 0xffff94895e879c30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e879d40 | file object: 0xffff94895e879dc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e87a060 | file object: 0xffff94895e87a0e0 | offsetby: 0x80 \Windows\System32\shacctprofile.dll pool: 0xffff94895e87a1f0 | file object: 0xffff94895e87a270 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx pool: 0xffff94895e87a380 | file object: 0xffff94895e87a400 | offsetby: 0x80 \Windows\System32\efsutil.dll pool: 0xffff94895e87a510 | file object: 0xffff94895e87a590 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx pool: 0xffff94895e87a6a0 | file object: 0xffff94895e87a720 | offsetby: 0x80 \Windows\System32\OnDemandBrokerClient.dll pool: 0xffff94895e87a830 | file object: 0xffff94895e87a8b0 | offsetby: 0x80 \$Directory pool: 0xffff94895e87a9c0 | file object: 0xffff94895e87aa40 | offsetby: 0x80 \Windows\System32\dllhost.exe pool: 0xffff94895e87ab50 | file object: 0xffff94895e87abd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e87ace0 | file object: 0xffff94895e87ad60 | offsetby: 0x80 \Windows\System32\Windows.Internal.SecurityMitigationsBroker.dll pool: 0xffff94895e87ae70 | file object: 0xffff94895e87aef0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e87b000 | file object: 0xffff94895e87b080 | offsetby: 0x80 \Windows\System32\domgmt.dll pool: 0xffff94895e87b190 | file object: 0xffff94895e87b210 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat{5a434228-7db9-11ea-9ed8-00155d24f4a5}.TM pool: 0xffff94895e87b320 | file object: 0xffff94895e87b3a0 | offsetby: 0x80 \$Directory pool: 0xffff94895e87b4b0 | file object: 0xffff94895e87b530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e87b640 | file object: 0xffff94895e87b6c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e87b7d0 | file object: 0xffff94895e87b850 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e87b960 | file object: 0xffff94895e87b9e0 | offsetby: 0x80 \Windows\System32\en-US\lsm.dll.mui pool: 0xffff94895e87baf0 | file object: 0xffff94895e87bb70 | offsetby: 0x80 \Windows\System32\SettingSync.dll pool: 0xffff94895e87bc80 | file object: 0xffff94895e87bd00 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx pool: 0xffff94895e87be10 | file object: 0xffff94895e87be90 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895e87c130 | file object: 0xffff94895e87c1b0 | offsetby: 0x80 \Windows\System32\en-US\winsrv.dll.mui pool: 0xffff94895e87c2c0 | file object: 0xffff94895e87c340 | offsetby: 0x80 \Windows\System32\en-US\user32.dll.mui pool: 0xffff94895e87c450 | file object: 0xffff94895e87c4d0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx pool: 0xffff94895e87c5e0 | file object: 0xffff94895e87c660 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\AppData\Local\Microsoft\Windows\UsrClass.dat{5a434228-7db9-11ea-9ed8-00155d24f4a5}.TM pool: 0xffff94895e87c770 | file object: 0xffff94895e87c7f0 | offsetby: 0x80 \$Directory pool: 0xffff94895e87c900 | file object: 0xffff94895e87c980 | offsetby: 0x80 \$Directory pool: 0xffff94895e87ca90 | file object: 0xffff94895e87cb10 | offsetby: 0x80 \Windows\System32\fhcfg.dll pool: 0xffff94895e87cc20 | file object: 0xffff94895e87cca0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx pool: 0xffff94895e87cdb0 | file object: 0xffff94895e87ce30 | offsetby: 0x80 \Windows\System32\AppxAllUserStore.dll pool: 0xffff94895e87d0d0 | file object: 0xffff94895e87d150 | offsetby: 0x80 \Windows\System32\deviceaccess.dll pool: 0xffff94895e87d260 | file object: 0xffff94895e87d2e0 | offsetby: 0x80 \Windows\System32\lxss\LxssManager.dll pool: 0xffff94895e87d3f0 | file object: 0xffff94895e87d470 | offsetby: 0x80 \Windows\System32\DesktopShellExt.dll pool: 0xffff94895e87d580 | file object: 0xffff94895e87d600 | offsetby: 0x80 \Windows\System32\en-US\CBDHSvc.dll.mui pool: 0xffff94895e87d710 | file object: 0xffff94895e87d790 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e87d8a0 | file object: 0xffff94895e87d920 | offsetby: 0x80 \Windows\System32\en-US\Microsoft.Bluetooth.UserService.dll.mui pool: 0xffff94895e87da30 | file object: 0xffff94895e87dab0 | offsetby: 0x80 \Windows\System32\CredentialEnrollmentManager.exe pool: 0xffff94895e87dbc0 | file object: 0xffff94895e87dc40 | offsetby: 0x80 \Windows\System32\lxss\en-US\LxssManager.dll.mui pool: 0xffff94895e87dd50 | file object: 0xffff94895e87ddd0 | offsetby: 0x80 \Windows\System32\sihost.exe pool: 0xffff94895e87e070 | file object: 0xffff94895e87e0f0 | offsetby: 0x80 \Windows\System32\en-US\cdpusersvc.dll.mui pool: 0xffff94895e87e200 | file object: 0xffff94895e87e280 | offsetby: 0x80 \Windows\System32\en-US\CredentialEnrollmentManager.exe.mui pool: 0xffff94895e87e390 | file object: 0xffff94895e87e410 | offsetby: 0x80 \Windows\System32\en-US\Windows.Devices.Picker.dll.mui pool: 0xffff94895e87e520 | file object: 0xffff94895e87e5a0 | offsetby: 0x80 \Windows\System32\ConsentUxClient.dll pool: 0xffff94895e87e6b0 | file object: 0xffff94895e87e730 | offsetby: 0x80 \Windows\System32\en-US\ConsentUxClient.dll.mui pool: 0xffff94895e87e840 | file object: 0xffff94895e87e8c0 | offsetby: 0x80 \Windows\System32\Windows.Devices.Picker.dll pool: 0xffff94895e87e9d0 | file object: 0xffff94895e87ea50 | offsetby: 0x80 \Windows\System32\DevicesFlowBroker.dll pool: 0xffff94895e87eb60 | file object: 0xffff94895e87ebe0 | offsetby: 0x80 \Windows\System32\cdpusersvc.dll pool: 0xffff94895e87ecf0 | file object: 0xffff94895e87ed70 | offsetby: 0x80 \Windows\System32\CBDHSvc.dll pool: 0xffff94895e87f010 | file object: 0xffff94895e87f090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e87f1a0 | file object: 0xffff94895e87f220 | offsetby: 0x80 \Windows\System32\CaptureService.dll pool: 0xffff94895e87f330 | file object: 0xffff94895e87f3b0 | offsetby: 0x80 \Windows\System32\Sens.dll pool: 0xffff94895e87f4c0 | file object: 0xffff94895e87f540 | offsetby: 0x80 \Windows\System32\MessagingService.dll pool: 0xffff94895e87f650 | file object: 0xffff94895e87f6d0 | offsetby: 0x80 \Windows\System32\en-US\MessagingService.dll.mui pool: 0xffff94895e87f7e0 | file object: 0xffff94895e87f860 | offsetby: 0x80 \Windows\System32\AarSvc.dll pool: 0xffff94895e87f970 | file object: 0xffff94895e87f9f0 | offsetby: 0x80 \Windows\System32\en-US\APHostRes.dll.mui pool: 0xffff94895e87fb00 | file object: 0xffff94895e87fb80 | offsetby: 0x80 \Windows\System32\en-US\DevicesFlowBroker.dll.mui pool: 0xffff94895e87fc90 | file object: 0xffff94895e87fd10 | offsetby: 0x80 \Windows\System32\APHostRes.dll pool: 0xffff94895e87fe20 | file object: 0xffff94895e87fea0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e880140 | file object: 0xffff94895e8801c0 | offsetby: 0x80 \Windows\System32\en-US\CaptureService.dll.mui pool: 0xffff94895e8802d0 | file object: 0xffff94895e880350 | offsetby: 0x80 \Windows\System32\ActivationManager.dll pool: 0xffff94895e880460 | file object: 0xffff94895e8804e0 | offsetby: 0x80 \$Directory pool: 0xffff94895e8805f0 | file object: 0xffff94895e880670 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e880780 | file object: 0xffff94895e880800 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895e880910 | file object: 0xffff94895e880990 | offsetby: 0x80 \Windows\System32\WpnUserService.dll pool: 0xffff94895e880aa0 | file object: 0xffff94895e880b20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e880c30 | file object: 0xffff94895e880cb0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e880dc0 | file object: 0xffff94895e880e40 | offsetby: 0x80 \Windows\System32\en-US\UserDataAccessRes.dll.mui pool: 0xffff94895e8810e0 | file object: 0xffff94895e881160 | offsetby: 0x80 \Windows\System32\en-US\PrintWorkflowService.dll.mui pool: 0xffff94895e881400 | file object: 0xffff94895e881480 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e881590 | file object: 0xffff94895e881610 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e881720 | file object: 0xffff94895e8817a0 | offsetby: 0x80 \$Directory pool: 0xffff94895e8818b0 | file object: 0xffff94895e881930 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e881a40 | file object: 0xffff94895e881ac0 | offsetby: 0x80 \Windows\System32\en-US\WpnUserService.dll.mui pool: 0xffff94895e881bd0 | file object: 0xffff94895e881c50 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e881d60 | file object: 0xffff94895e881de0 | offsetby: 0x80 \$Directory pool: 0xffff94895e882080 | file object: 0xffff94895e882100 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp pool: 0xffff94895e882210 | file object: 0xffff94895e882290 | offsetby: 0x80 \Windows\System32\UserDataAccessRes.dll pool: 0xffff94895e8823a0 | file object: 0xffff94895e882420 | offsetby: 0x80 \Windows\System32\PrintWorkflowService.dll pool: 0xffff94895e882530 | file object: 0xffff94895e8825b0 | offsetby: 0x80 \Windows\System32\Windows.Shell.ServiceHostBuilder.dll pool: 0xffff94895e8826c0 | file object: 0xffff94895e882740 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895e882850 | file object: 0xffff94895e8828d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e8829e0 | file object: 0xffff94895e882a60 | offsetby: 0x80 \Windows\System32\ClipboardServer.dll pool: 0xffff94895e882b70 | file object: 0xffff94895e882bf0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e882d00 | file object: 0xffff94895e882d80 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e883020 | file object: 0xffff94895e8830a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e8831b0 | file object: 0xffff94895e883230 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895e883340 | file object: 0xffff94895e8833c0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895e8834d0 | file object: 0xffff94895e883550 | offsetby: 0x80 \Windows\System32\taskhostw.exe pool: 0xffff94895e883660 | file object: 0xffff94895e8836e0 | offsetby: 0x80 \Windows\System32\Windows.Security.Authentication.Web.Core.dll pool: 0xffff94895e8837f0 | file object: 0xffff94895e883870 | offsetby: 0x80 \Windows\System32\en-US\TokenBroker.dll.mui pool: 0xffff94895e883980 | file object: 0xffff94895e883a00 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895e883b10 | file object: 0xffff94895e883b90 | offsetby: 0x80 \$Directory pool: 0xffff94895e883ca0 | file object: 0xffff94895e883d20 | offsetby: 0x80 \Windows\System32\TokenBroker.dll pool: 0xffff94895e883e30 | file object: 0xffff94895e883eb0 | offsetby: 0x80 \Windows\SysWOW64\MicrosoftAccountTokenProvider.dll pool: 0xffff94895eb043f0 | file object: 0xffff94895eb04450 | offsetby: 0x60 \Windows\System32\drivers\p9rdr.sys pool: 0xffff94895eb046d0 | file object: 0xffff94895eb04730 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895eb04c90 | file object: 0xffff94895eb04cf0 | offsetby: 0x60 [NOT READABLE] pool: 0xffff94895eb25210 | file object: 0xffff94895eb25270 | offsetby: 0x60 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.18362.752.cat pool: 0xffff94895eb650d0 | file object: 0xffff94895eb65150 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb65260 | file object: 0xffff94895eb652e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT pool: 0xffff94895eb653f0 | file object: 0xffff94895eb65470 | offsetby: 0x80 \Windows\System32\upshared.dll pool: 0xffff94895eb65580 | file object: 0xffff94895eb65600 | offsetby: 0x80 \Windows\System32\modernexecserver.dll pool: 0xffff94895eb65710 | file object: 0xffff94895eb65790 | offsetby: 0x80 \Windows\System32\tokenbinding.dll pool: 0xffff94895eb658a0 | file object: 0xffff94895eb65920 | offsetby: 0x80 \Windows\SysWOW64\wkscli.dll pool: 0xffff94895eb65a30 | file object: 0xffff94895eb65ab0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb65bc0 | file object: 0xffff94895eb65c40 | offsetby: 0x80 \Windows\SysWOW64\DataExchange.dll pool: 0xffff94895eb65d50 | file object: 0xffff94895eb65dd0 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-0B3A9016.pf pool: 0xffff94895eb66070 | file object: 0xffff94895eb660f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb66200 | file object: 0xffff94895eb66280 | offsetby: 0x80 \Windows\System32\AppointmentActivation.dll pool: 0xffff94895eb66390 | file object: 0xffff94895eb66410 | offsetby: 0x80 \Windows\System32\en-US\MsCtfMonitor.dll.mui pool: 0xffff94895eb66520 | file object: 0xffff94895eb665a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb666b0 | file object: 0xffff94895eb66730 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb66840 | file object: 0xffff94895eb668c0 | offsetby: 0x80 \Windows\System32\msutb.dll pool: 0xffff94895eb669d0 | file object: 0xffff94895eb66a50 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895eb66b60 | file object: 0xffff94895eb66be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb66cf0 | file object: 0xffff94895eb66d70 | offsetby: 0x80 \Windows\System32\OneCoreCommonProxyStub.dll pool: 0xffff94895eb67010 | file object: 0xffff94895eb67090 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb671a0 | file object: 0xffff94895eb67220 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb67330 | file object: 0xffff94895eb673b0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb674c0 | file object: 0xffff94895eb67540 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb67650 | file object: 0xffff94895eb676d0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895eb677e0 | file object: 0xffff94895eb67860 | offsetby: 0x80 \Windows\System32\PlaySndSrv.dll pool: 0xffff94895eb67970 | file object: 0xffff94895eb679f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb67b00 | file object: 0xffff94895eb67b80 | offsetby: 0x80 \Windows\System32\en-US\taskhostw.exe.mui pool: 0xffff94895eb67c90 | file object: 0xffff94895eb67d10 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.dll pool: 0xffff94895eb67e20 | file object: 0xffff94895eb67ea0 | offsetby: 0x80 \Windows\System32\MsCtfMonitor.dll pool: 0xffff94895eb68140 | file object: 0xffff94895eb681c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb682d0 | file object: 0xffff94895eb68350 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb68460 | file object: 0xffff94895eb684e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb685f0 | file object: 0xffff94895eb68670 | offsetby: 0x80 \Windows\System32\TabSvc.dll pool: 0xffff94895eb68780 | file object: 0xffff94895eb68800 | offsetby: 0x80 \Windows\System32\notificationplatformcomponent.dll pool: 0xffff94895eb68910 | file object: 0xffff94895eb68990 | offsetby: 0x80 \Windows\System32\AppContracts.dll pool: 0xffff94895eb68aa0 | file object: 0xffff94895eb68b20 | offsetby: 0x80 \Windows\System32\ACPBackgroundManagerPolicy.dll pool: 0xffff94895eb68c30 | file object: 0xffff94895eb68cb0 | offsetby: 0x80 \Windows\System32\InputService.dll pool: 0xffff94895eb68dc0 | file object: 0xffff94895eb68e40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb690e0 | file object: 0xffff94895eb69160 | offsetby: 0x80 \Windows\System32\WindowManagement.dll pool: 0xffff94895eb69270 | file object: 0xffff94895eb692f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb69400 | file object: 0xffff94895eb69480 | offsetby: 0x80 \Windows\System32\en-US\TabSvc.dll.mui pool: 0xffff94895eb69590 | file object: 0xffff94895eb69610 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\L.User.cdpresource pool: 0xffff94895eb69720 | file object: 0xffff94895eb697a0 | offsetby: 0x80 \Windows\System32\Windows.StateRepositoryBroker.dll pool: 0xffff94895eb698b0 | file object: 0xffff94895eb69930 | offsetby: 0x80 \Windows\System32\ctfmon.exe pool: 0xffff94895eb69a40 | file object: 0xffff94895eb69ac0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb69bd0 | file object: 0xffff94895eb69c50 | offsetby: 0x80 \Windows\System32\wlidprov.dll pool: 0xffff94895eb69d60 | file object: 0xffff94895eb69de0 | offsetby: 0x80 \Windows\System32\en-US\ctfmon.exe.mui pool: 0xffff94895eb6a080 | file object: 0xffff94895eb6a100 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895eb6a210 | file object: 0xffff94895eb6a290 | offsetby: 0x80 \Windows\System32\Windows.System.Launcher.dll pool: 0xffff94895eb6a3a0 | file object: 0xffff94895eb6a420 | offsetby: 0x80 \Windows\System32\PackageStateChangeHandler.dll pool: 0xffff94895eb6a530 | file object: 0xffff94895eb6a5b0 | offsetby: 0x80 \Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll pool: 0xffff94895eb6a6c0 | file object: 0xffff94895eb6a740 | offsetby: 0x80 \Windows\System32\twinui.appcore.dll pool: 0xffff94895eb6a850 | file object: 0xffff94895eb6a8d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6a9e0 | file object: 0xffff94895eb6aa60 | offsetby: 0x80 \Windows\System32\UiaManager.dll pool: 0xffff94895eb6ab70 | file object: 0xffff94895eb6abf0 | offsetby: 0x80 \Windows\System32\execmodelproxy.dll pool: 0xffff94895eb6ad00 | file object: 0xffff94895eb6ad80 | offsetby: 0x80 \Windows\System32\TextInputMethodFormatter.dll pool: 0xffff94895eb6b020 | file object: 0xffff94895eb6b0a0 | offsetby: 0x80 \Windows\System32\ShareHost.dll pool: 0xffff94895eb6b1b0 | file object: 0xffff94895eb6b230 | offsetby: 0x80 \Windows\System32\BackgroundMediaPolicy.dll pool: 0xffff94895eb6b340 | file object: 0xffff94895eb6b3c0 | offsetby: 0x80 \Windows\System32\srpapi.dll pool: 0xffff94895eb6b4d0 | file object: 0xffff94895eb6b550 | offsetby: 0x80 \$Directory pool: 0xffff94895eb6b660 | file object: 0xffff94895eb6b6e0 | offsetby: 0x80 \Windows\System32\mssrch.dll pool: 0xffff94895eb6b7f0 | file object: 0xffff94895eb6b870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6b980 | file object: 0xffff94895eb6ba00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb6bb10 | file object: 0xffff94895eb6bb90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb6bca0 | file object: 0xffff94895eb6bd20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6be30 | file object: 0xffff94895eb6beb0 | offsetby: 0x80 \Windows\System32\daxexec.dll pool: 0xffff94895eb6c150 | file object: 0xffff94895eb6c1d0 | offsetby: 0x80 \Windows\System32\InputLocaleManager.dll pool: 0xffff94895eb6c2e0 | file object: 0xffff94895eb6c360 | offsetby: 0x80 \$Directory pool: 0xffff94895eb6c470 | file object: 0xffff94895eb6c4f0 | offsetby: 0x80 \Windows\System32\CoreShellExtFramework.dll pool: 0xffff94895eb6c600 | file object: 0xffff94895eb6c680 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{38D9A220-6110-4661-9895-6AA5C39BE7AF} pool: 0xffff94895eb6c790 | file object: 0xffff94895eb6c810 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6c920 | file object: 0xffff94895eb6c9a0 | offsetby: 0x80 \Windows\System32\MTF.dll pool: 0xffff94895eb6cab0 | file object: 0xffff94895eb6cb30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6cc40 | file object: 0xffff94895eb6ccc0 | offsetby: 0x80 \Windows\System32\tquery.dll pool: 0xffff94895eb6cdd0 | file object: 0xffff94895eb6ce50 | offsetby: 0x80 \Windows\System32\SmartCardBackgroundPolicy.dll pool: 0xffff94895eb6d0f0 | file object: 0xffff94895eb6d170 | offsetby: 0x80 \Windows\System32\keyiso.dll pool: 0xffff94895eb6d280 | file object: 0xffff94895eb6d300 | offsetby: 0x80 \Windows\System32\en-US\keyiso.dll.mui pool: 0xffff94895eb6d410 | file object: 0xffff94895eb6d490 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_373ee86b-ec20-4082-94ac-039dcac01c17 pool: 0xffff94895eb6d5a0 | file object: 0xffff94895eb6d620 | offsetby: 0x80 \$Directory pool: 0xffff94895eb6d730 | file object: 0xffff94895eb6d7b0 | offsetby: 0x80 \Windows\System32\container.dll pool: 0xffff94895eb6d8c0 | file object: 0xffff94895eb6d940 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Protect\S-1-5-21-3234566417-3121902272-2793192418-1001\2851a24d-bb2f-40f9-b64f-15d9e46e6cff pool: 0xffff94895eb6da50 | file object: 0xffff94895eb6dad0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Protect\CREDHIST pool: 0xffff94895eb6dbe0 | file object: 0xffff94895eb6dc60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6dd70 | file object: 0xffff94895eb6ddf0 | offsetby: 0x80 \Windows\System32\MTFServer.dll pool: 0xffff94895eb6e090 | file object: 0xffff94895eb6e110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6e220 | file object: 0xffff94895eb6e2a0 | offsetby: 0x80 \Windows\System32\en-US\datamap.0409.dat pool: 0xffff94895eb6e3b0 | file object: 0xffff94895eb6e430 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst pool: 0xffff94895eb6e540 | file object: 0xffff94895eb6e5c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6e6d0 | file object: 0xffff94895eb6e750 | offsetby: 0x80 \$Directory pool: 0xffff94895eb6e860 | file object: 0xffff94895eb6e8e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin pool: 0xffff94895eb6e9f0 | file object: 0xffff94895eb6ea70 | offsetby: 0x80 \Windows\System32\wshbth.dll pool: 0xffff94895eb6eb80 | file object: 0xffff94895eb6ec00 | offsetby: 0x80 \Windows\System32\en-US\userinit.exe.mui pool: 0xffff94895eb6ed10 | file object: 0xffff94895eb6ed90 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.64.28001.0_x64__8wekyb3d8bbwe\resources.pri pool: 0xffff94895eb6f030 | file object: 0xffff94895eb6f0b0 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp pool: 0xffff94895eb6f1c0 | file object: 0xffff94895eb6f240 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst pool: 0xffff94895eb6f350 | file object: 0xffff94895eb6f3d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb6f4e0 | file object: 0xffff94895eb6f560 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_373ee86b-ec20-4082-94ac-039dcac01c17 pool: 0xffff94895eb6f670 | file object: 0xffff94895eb6f6f0 | offsetby: 0x80 \Windows\System32\userinitext.dll pool: 0xffff94895eb6f800 | file object: 0xffff94895eb6f880 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895eb6f990 | file object: 0xffff94895eb6fa10 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895eb6fb20 | file object: 0xffff94895eb6fba0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb6fcb0 | file object: 0xffff94895eb6fd30 | offsetby: 0x80 \$Directory pool: 0xffff94895eb6fe40 | file object: 0xffff94895eb6fec0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Safety\shell\remote\script_336273089957297446437176090113554533354.rel.v2 pool: 0xffff94895eb70160 | file object: 0xffff94895eb701e0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb702f0 | file object: 0xffff94895eb70370 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895eb70480 | file object: 0xffff94895eb70500 | offsetby: 0x80 \Windows\System32\vaultcli.dll pool: 0xffff94895eb70610 | file object: 0xffff94895eb70690 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb707a0 | file object: 0xffff94895eb70820 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb70930 | file object: 0xffff94895eb709b0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\e2afd15b81ad9e33c4e89e5911ae01485d9fadf7\e2afd15b81ad9e33c4e89e5911ae01485d9fadf7.pieceshash pool: 0xffff94895eb70ac0 | file object: 0xffff94895eb70b40 | offsetby: 0x80 \Windows\System32\userinit.exe pool: 0xffff94895eb70c50 | file object: 0xffff94895eb70cd0 | offsetby: 0x80 \Windows\System32\sbservicetrigger.dll pool: 0xffff94895eb70de0 | file object: 0xffff94895eb70e60 | offsetby: 0x80 \ProgramData\Microsoft\Windows Security Health\Logs\SHS-06032020-232121-7-3f-18362.1.amd64fre.19h1_release.190318-1202.etl pool: 0xffff94895eb71100 | file object: 0xffff94895eb71180 | offsetby: 0x80 \Windows\System32\en-US\cdpsvc.dll.mui pool: 0xffff94895eb71290 | file object: 0xffff94895eb71310 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895eb71420 | file object: 0xffff94895eb714a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb715b0 | file object: 0xffff94895eb71630 | offsetby: 0x80 \$Directory pool: 0xffff94895eb71740 | file object: 0xffff94895eb717c0 | offsetby: 0x80 \Windows\System32\cdpsvc.dll pool: 0xffff94895eb718d0 | file object: 0xffff94895eb71950 | offsetby: 0x80 \Windows\explorer.exe pool: 0xffff94895eb71a60 | file object: 0xffff94895eb71ae0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\cversions.1.db pool: 0xffff94895eb71bf0 | file object: 0xffff94895eb71c70 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb71d80 | file object: 0xffff94895eb71e00 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db pool: 0xffff94895eb720a0 | file object: 0xffff94895eb72120 | offsetby: 0x80 \Windows\en-US\explorer.exe.mui pool: 0xffff94895eb72230 | file object: 0xffff94895eb722b0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb723c0 | file object: 0xffff94895eb72440 | offsetby: 0x80 \Windows\System32\AppResolver.dll pool: 0xffff94895eb72550 | file object: 0xffff94895eb725d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb726e0 | file object: 0xffff94895eb72760 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb72870 | file object: 0xffff94895eb728f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb72a00 | file object: 0xffff94895eb72a80 | offsetby: 0x80 \$Directory pool: 0xffff94895eb72b90 | file object: 0xffff94895eb72c10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb72d20 | file object: 0xffff94895eb72da0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini pool: 0xffff94895eb73040 | file object: 0xffff94895eb730c0 | offsetby: 0x80 \Windows\System32\twinapi.dll pool: 0xffff94895eb731d0 | file object: 0xffff94895eb73250 | offsetby: 0x80 \$Directory pool: 0xffff94895eb73360 | file object: 0xffff94895eb733e0 | offsetby: 0x80 \Users\User\Music\desktop.ini pool: 0xffff94895eb734f0 | file object: 0xffff94895eb73570 | offsetby: 0x80 \Users\User\Pictures\desktop.ini pool: 0xffff94895eb73680 | file object: 0xffff94895eb73700 | offsetby: 0x80 \Users\User\Downloads\desktop.ini pool: 0xffff94895eb73810 | file object: 0xffff94895eb73890 | offsetby: 0x80 \Users\User\OneDrive\desktop.ini pool: 0xffff94895eb739a0 | file object: 0xffff94895eb73a20 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini pool: 0xffff94895eb73b30 | file object: 0xffff94895eb73bb0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\desktop.ini pool: 0xffff94895eb73cc0 | file object: 0xffff94895eb73d40 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini pool: 0xffff94895eb73e50 | file object: 0xffff94895eb73ed0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb74170 | file object: 0xffff94895eb741f0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb74300 | file object: 0xffff94895eb74380 | offsetby: 0x80 \$Directory pool: 0xffff94895eb74490 | file object: 0xffff94895eb74510 | offsetby: 0x80 \Users\User\Videos\desktop.ini pool: 0xffff94895eb74620 | file object: 0xffff94895eb746a0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb747b0 | file object: 0xffff94895eb74830 | offsetby: 0x80 \Users\User\Documents\desktop.ini pool: 0xffff94895eb74940 | file object: 0xffff94895eb749c0 | offsetby: 0x80 \Users\User\Desktop\desktop.ini pool: 0xffff94895eb74ad0 | file object: 0xffff94895eb74b50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb74c60 | file object: 0xffff94895eb74ce0 | offsetby: 0x80 \Windows\System32\windows.immersiveshell.serviceprovider.dll pool: 0xffff94895eb74df0 | file object: 0xffff94895eb74e70 | offsetby: 0x80 \Windows\System32\themeui.dll pool: 0xffff94895eb75110 | file object: 0xffff94895eb75190 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb752a0 | file object: 0xffff94895eb75320 | offsetby: 0x80 \Windows\System32\en-US\oleaccrc.dll.mui pool: 0xffff94895eb75430 | file object: 0xffff94895eb754b0 | offsetby: 0x80 \Windows\System32\en-US\ie4uinit.exe.mui pool: 0xffff94895eb755c0 | file object: 0xffff94895eb75640 | offsetby: 0x80 \Windows\System32\en-US\themeui.dll.mui pool: 0xffff94895eb75750 | file object: 0xffff94895eb757d0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb758e0 | file object: 0xffff94895eb75960 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895eb75a70 | file object: 0xffff94895eb75af0 | offsetby: 0x80 \Windows\System32\SettingSyncCore.dll pool: 0xffff94895eb75c00 | file object: 0xffff94895eb75c80 | offsetby: 0x80 \Windows\System32\twinui.pcshell.dll pool: 0xffff94895eb75d90 | file object: 0xffff94895eb75e10 | offsetby: 0x80 \Windows\System32\TileDataRepository.dll pool: 0xffff94895eb760b0 | file object: 0xffff94895eb76130 | offsetby: 0x80 \Windows\System32\en-US\shell32.dll.mui pool: 0xffff94895eb76240 | file object: 0xffff94895eb762c0 | offsetby: 0x80 \Windows\System32\oleaccrc.dll pool: 0xffff94895eb763d0 | file object: 0xffff94895eb76450 | offsetby: 0x80 \Windows\Fonts\segmdl2.ttf pool: 0xffff94895eb76560 | file object: 0xffff94895eb765e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\cversions.3.db pool: 0xffff94895eb766f0 | file object: 0xffff94895eb76770 | offsetby: 0x80 \Windows\System32\SndVolSSO.dll pool: 0xffff94895eb76880 | file object: 0xffff94895eb76900 | offsetby: 0x80 \Windows\Fonts\StaticCache.dat pool: 0xffff94895eb76a10 | file object: 0xffff94895eb76a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb76ba0 | file object: 0xffff94895eb76c20 | offsetby: 0x80 \Windows\System32\wmploc.DLL pool: 0xffff94895eb76d30 | file object: 0xffff94895eb76db0 | offsetby: 0x80 \Windows\System32\StartTileData.dll pool: 0xffff94895eb77050 | file object: 0xffff94895eb770d0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb771e0 | file object: 0xffff94895eb77260 | offsetby: 0x80 \Windows\System32\DataExchange.dll pool: 0xffff94895eb77370 | file object: 0xffff94895eb773f0 | offsetby: 0x80 \Users\Public\Desktop\desktop.ini pool: 0xffff94895eb77500 | file object: 0xffff94895eb77580 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb77690 | file object: 0xffff94895eb77710 | offsetby: 0x80 \Windows\System32\en-US\wmploc.DLL.mui pool: 0xffff94895eb77820 | file object: 0xffff94895eb778a0 | offsetby: 0x80 \Windows\System32\oleacc.dll pool: 0xffff94895eb779b0 | file object: 0xffff94895eb77a30 | offsetby: 0x80 \Windows\System32\ie4uinit.exe pool: 0xffff94895eb77b40 | file object: 0xffff94895eb77bc0 | offsetby: 0x80 \Windows\System32\ExplorerFrame.dll pool: 0xffff94895eb77cd0 | file object: 0xffff94895eb77d50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb77e60 | file object: 0xffff94895eb77ee0 | offsetby: 0x80 \Windows\ImmersiveControlPanel\pris\resources.en-US.pri pool: 0xffff94895eb78180 | file object: 0xffff94895eb78200 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb78310 | file object: 0xffff94895eb78390 | offsetby: 0x80 \Windows\ImmersiveControlPanel\resources.pri pool: 0xffff94895eb784a0 | file object: 0xffff94895eb78520 | offsetby: 0x80 \$Directory pool: 0xffff94895eb78630 | file object: 0xffff94895eb786b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb787c0 | file object: 0xffff94895eb78840 | offsetby: 0x80 \$Directory pool: 0xffff94895eb78950 | file object: 0xffff94895eb789d0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb78ae0 | file object: 0xffff94895eb78b60 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895eb78c70 | file object: 0xffff94895eb78cf0 | offsetby: 0x80 \Windows\System32\Windows.Security.Authentication.OnlineId.dll pool: 0xffff94895eb78e00 | file object: 0xffff94895eb78e80 | offsetby: 0x80 \Windows\System32\cldapi.dll pool: 0xffff94895eb79120 | file object: 0xffff94895eb791a0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895eb792b0 | file object: 0xffff94895eb79330 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db pool: 0xffff94895eb79440 | file object: 0xffff94895eb794c0 | offsetby: 0x80 \Windows\rescache\_merged\2421516671\1474517922.pri pool: 0xffff94895eb795d0 | file object: 0xffff94895eb79650 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db pool: 0xffff94895eb79760 | file object: 0xffff94895eb797e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb798f0 | file object: 0xffff94895eb79970 | offsetby: 0x80 \$Directory pool: 0xffff94895eb79a80 | file object: 0xffff94895eb79b00 | offsetby: 0x80 \Windows\System32\edputil.dll pool: 0xffff94895eb79c10 | file object: 0xffff94895eb79c90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\CPUSampling\Microsoft.DiagnosticsHub.CpuSampling.pkgdef pool: 0xffff94895eb79da0 | file object: 0xffff94895eb79e20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7a0c0 | file object: 0xffff94895eb7a140 | offsetby: 0x80 \Windows\SystemResources\shsvcs.dll.mun pool: 0xffff94895eb7a250 | file object: 0xffff94895eb7a2d0 | offsetby: 0x80 \Windows\System32\thumbcache.dll pool: 0xffff94895eb7a3e0 | file object: 0xffff94895eb7a460 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx pool: 0xffff94895eb7a570 | file object: 0xffff94895eb7a5f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx pool: 0xffff94895eb7a700 | file object: 0xffff94895eb7a780 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx pool: 0xffff94895eb7a890 | file object: 0xffff94895eb7a910 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx pool: 0xffff94895eb7aa20 | file object: 0xffff94895eb7aaa0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7abb0 | file object: 0xffff94895eb7ac30 | offsetby: 0x80 \$Directory pool: 0xffff94895eb7ad40 | file object: 0xffff94895eb7adc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7b060 | file object: 0xffff94895eb7b0e0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb7b1f0 | file object: 0xffff94895eb7b270 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\e2afd15b81ad9e33c4e89e5911ae01485d9fadf7\47f30b515a1536f0ce55897ebcfee8b7e3c6fb60ad1761b502fbcf58eb79b45e pool: 0xffff94895eb7b380 | file object: 0xffff94895eb7b400 | offsetby: 0x80 \$Directory pool: 0xffff94895eb7b510 | file object: 0xffff94895eb7b590 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\ParallelDebugger\GpuDebugEngine.pkgdef pool: 0xffff94895eb7b6a0 | file object: 0xffff94895eb7b720 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{5D517814-A895-4CD6-B12E-471699AB34E6}.catalogItem pool: 0xffff94895eb7b830 | file object: 0xffff94895eb7b8b0 | offsetby: 0x80 \Windows\System32\en-US\WLIDSvc.dll.mui pool: 0xffff94895eb7b9c0 | file object: 0xffff94895eb7ba40 | offsetby: 0x80 \Users\User\AppData\Local\IconCache.db pool: 0xffff94895eb7bb50 | file object: 0xffff94895eb7bbd0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db pool: 0xffff94895eb7bce0 | file object: 0xffff94895eb7bd60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\TreeNavigation\Microsoft.VisualStudio.Shell.TreeNavigation.HierarchyProvider.pkgdef pool: 0xffff94895eb7be70 | file object: 0xffff94895eb7bef0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7c000 | file object: 0xffff94895eb7c080 | offsetby: 0x80 \Windows\System32\ntshrui.dll pool: 0xffff94895eb7c190 | file object: 0xffff94895eb7c210 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7c320 | file object: 0xffff94895eb7c3a0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1015_POS4.jpg pool: 0xffff94895eb7c4b0 | file object: 0xffff94895eb7c530 | offsetby: 0x80 \$Directory pool: 0xffff94895eb7c640 | file object: 0xffff94895eb7c6c0 | offsetby: 0x80 \Windows\System32\wlidres.dll pool: 0xffff94895eb7c7d0 | file object: 0xffff94895eb7c850 | offsetby: 0x80 \Windows\SysWOW64\d3d11.dll pool: 0xffff94895eb7c960 | file object: 0xffff94895eb7c9e0 | offsetby: 0x80 \Windows\System32\wlidsvc.dll pool: 0xffff94895eb7caf0 | file object: 0xffff94895eb7cb70 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db pool: 0xffff94895eb7cc80 | file object: 0xffff94895eb7cd00 | offsetby: 0x80 \Users\Public\desktop.ini pool: 0xffff94895eb7ce10 | file object: 0xffff94895eb7ce90 | offsetby: 0x80 \Windows\System32\twinui.dll pool: 0xffff94895eb7d130 | file object: 0xffff94895eb7d1b0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx pool: 0xffff94895eb7d2c0 | file object: 0xffff94895eb7d340 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895eb7d450 | file object: 0xffff94895eb7d4d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb7d5e0 | file object: 0xffff94895eb7d660 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb7d770 | file object: 0xffff94895eb7d7f0 | offsetby: 0x80 \Windows\System32\ApplicationFrame.dll pool: 0xffff94895eb7d900 | file object: 0xffff94895eb7d980 | offsetby: 0x80 \Windows\System32\en-US\imageres.dll.mui pool: 0xffff94895eb7da90 | file object: 0xffff94895eb7db10 | offsetby: 0x80 \Windows\System32\imageres.dll pool: 0xffff94895eb7dc20 | file object: 0xffff94895eb7dca0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db pool: 0xffff94895eb7ddb0 | file object: 0xffff94895eb7de30 | offsetby: 0x80 \Users\desktop.ini pool: 0xffff94895eb7e0d0 | file object: 0xffff94895eb7e150 | offsetby: 0x80 \Users\User\Desktop\Windows Dev Center.url pool: 0xffff94895eb7e260 | file object: 0xffff94895eb7e2e0 | offsetby: 0x80 \Users\User\Contacts\desktop.ini pool: 0xffff94895eb7e3f0 | file object: 0xffff94895eb7e470 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb7e580 | file object: 0xffff94895eb7e600 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb7e710 | file object: 0xffff94895eb7e790 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb7e8a0 | file object: 0xffff94895eb7e920 | offsetby: 0x80 \Windows\SysWOW64\dxgi.dll pool: 0xffff94895eb7ea30 | file object: 0xffff94895eb7eab0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb7ebc0 | file object: 0xffff94895eb7ec40 | offsetby: 0x80 \Windows\SysWOW64\DXCore.dll pool: 0xffff94895eb7ed50 | file object: 0xffff94895eb7edd0 | offsetby: 0x80 \Users\User\Searches\desktop.ini pool: 0xffff94895eb7f070 | file object: 0xffff94895eb7f0f0 | offsetby: 0x80 \Users\User\Desktop\Microsoft Edge.lnk pool: 0xffff94895eb7f200 | file object: 0xffff94895eb7f280 | offsetby: 0x80 \Windows\SysWOW64\msIso.dll pool: 0xffff94895eb7f390 | file object: 0xffff94895eb7f410 | offsetby: 0x80 \Users\User\Saved Games\desktop.ini pool: 0xffff94895eb7f520 | file object: 0xffff94895eb7f5a0 | offsetby: 0x80 \Windows\System32\msIso.dll pool: 0xffff94895eb7f6b0 | file object: 0xffff94895eb7f730 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\clojure\package.json}.MANIFESTols.mui pool: 0xffff94895eb7f840 | file object: 0xffff94895eb7f8c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb7f9d0 | file object: 0xffff94895eb7fa50 | offsetby: 0x80 \Users\User\Favorites\desktop.ini pool: 0xffff94895eb7fb60 | file object: 0xffff94895eb7fbe0 | offsetby: 0x80 \Windows\SysWOW64\dcomp.dll pool: 0xffff94895eb7fcf0 | file object: 0xffff94895eb7fd70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb80010 | file object: 0xffff94895eb80090 | offsetby: 0x80 \Windows\System32\linkinfo.dll pool: 0xffff94895eb801a0 | file object: 0xffff94895eb80220 | offsetby: 0x80 \Windows\System32\ieframe.dll pool: 0xffff94895eb80330 | file object: 0xffff94895eb803b0 | offsetby: 0x80 \Windows\System32\en-US\ieframe.dll.mui pool: 0xffff94895eb804c0 | file object: 0xffff94895eb80540 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb80650 | file object: 0xffff94895eb806d0 | offsetby: 0x80 \Users\User\Desktop\Visual Studio 2019.lnk pool: 0xffff94895eb807e0 | file object: 0xffff94895eb80860 | offsetby: 0x80 \ProgramData\Microsoft\IdentityCRL\production\wlidsvcconfig.xml pool: 0xffff94895eb80970 | file object: 0xffff94895eb809f0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jtx pool: 0xffff94895eb80b00 | file object: 0xffff94895eb80b80 | offsetby: 0x80 \Program Files (x86)\desktop.ini pool: 0xffff94895eb80c90 | file object: 0xffff94895eb80d10 | offsetby: 0x80 \Users\User\Links\desktop.ini pool: 0xffff94895eb80e20 | file object: 0xffff94895eb80ea0 | offsetby: 0x80 \Users\User\Desktop\Visual Studio Code.lnk pool: 0xffff94895eb81140 | file object: 0xffff94895eb811c0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb812d0 | file object: 0xffff94895eb81350 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\amd64\FileSyncShell64.dll pool: 0xffff94895eb81460 | file object: 0xffff94895eb814e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb815f0 | file object: 0xffff94895eb81670 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895eb81780 | file object: 0xffff94895eb81800 | offsetby: 0x80 \Windows\System32\EhStorShell.dll pool: 0xffff94895eb81910 | file object: 0xffff94895eb81990 | offsetby: 0x80 \Windows\System32\cscui.dll pool: 0xffff94895eb81aa0 | file object: 0xffff94895eb81b20 | offsetby: 0x80 \$Directory pool: 0xffff94895eb81c30 | file object: 0xffff94895eb81cb0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{B4507C69-3348-4271-AE07-5D5041555910}.catalogItem pool: 0xffff94895eb81dc0 | file object: 0xffff94895eb81e40 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{E911846A-C806-4AFD-996E-3BA648394219}.catalogItem pool: 0xffff94895eb820e0 | file object: 0xffff94895eb82160 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb82270 | file object: 0xffff94895eb822f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895eb82400 | file object: 0xffff94895eb82480 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895eb82590 | file object: 0xffff94895eb82610 | offsetby: 0x80 \$Directory pool: 0xffff94895eb82720 | file object: 0xffff94895eb827a0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{815709EB-54A1-4916-8668-AB029091690B}.catalogItem pool: 0xffff94895eb828b0 | file object: 0xffff94895eb82930 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb82a40 | file object: 0xffff94895eb82ac0 | offsetby: 0x80 \Windows\System32\UNP\UpdateNotificationHelpers.dll pool: 0xffff94895eb82bd0 | file object: 0xffff94895eb82c50 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895eb82d60 | file object: 0xffff94895eb82de0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Credentials pool: 0xffff94895eb83080 | file object: 0xffff94895eb83100 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Credentials\DFBE70A7E5CC19A398EBF1B96859CE5D pool: 0xffff94895eb83210 | file object: 0xffff94895eb83290 | offsetby: 0x80 \User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\index-95871d36abc6cb7316ef593ccec81bb1. pool: 0xffff94895eb833a0 | file object: 0xffff94895eb83420 | offsetby: 0x80 \Windows\System32\dllhost.exe pool: 0xffff94895eb83530 | file object: 0xffff94895eb835b0 | offsetby: 0x80 \$Directory pool: 0xffff94895eb836c0 | file object: 0xffff94895eb83740 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Credentials\DFBE70A7E5CC19A398EBF1B96859CE5D pool: 0xffff94895eb83850 | file object: 0xffff94895eb838d0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Credentials pool: 0xffff94895eb839e0 | file object: 0xffff94895eb83a60 | offsetby: 0x80 \Windows\System32\HolographicExtensions.dll pool: 0xffff94895eb83b70 | file object: 0xffff94895eb83bf0 | offsetby: 0x80 \Windows\System32\mfcore.dll pool: 0xffff94895eb83d00 | file object: 0xffff94895eb83d80 | offsetby: 0x80 \Windows\System32\VirtualMonitorManager.dll pool: 0xffff94895eb84020 | file object: 0xffff94895eb840a0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895eb841b0 | file object: 0xffff94895eb84230 | offsetby: 0x80 \$Directory pool: 0xffff94895eb84340 | file object: 0xffff94895eb843c0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895eb844d0 | file object: 0xffff94895eb84550 | offsetby: 0x80 \$Directory pool: 0xffff94895eb84660 | file object: 0xffff94895eb846e0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_17aba8d26da530da\GdiPlus.dll pool: 0xffff94895eb847f0 | file object: 0xffff94895eb84870 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgePDF.targetsize-48.png pool: 0xffff94895eb84980 | file object: 0xffff94895eb84a00 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_17aba8d26da530da pool: 0xffff94895eb84b10 | file object: 0xffff94895eb84b90 | offsetby: 0x80 \Windows\System32\msauserext.dll pool: 0xffff94895eb84ca0 | file object: 0xffff94895eb84d20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895eb84e30 | file object: 0xffff94895eb84eb0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed43160 | file object: 0xffff94895ed431e0 | offsetby: 0x80 \Windows\System32\QuietHours.dll pool: 0xffff94895ed432f0 | file object: 0xffff94895ed43370 | offsetby: 0x80 \Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll pool: 0xffff94895ed43480 | file object: 0xffff94895ed43500 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgeSquare44x44.scale-150.png pool: 0xffff94895ed43610 | file object: 0xffff94895ed43690 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol pool: 0xffff94895ed437a0 | file object: 0xffff94895ed43820 | offsetby: 0x80 \$Directory pool: 0xffff94895ed43930 | file object: 0xffff94895ed439b0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed43ac0 | file object: 0xffff94895ed43b40 | offsetby: 0x80 \Windows\rescache\_merged\861366399\770357905.pri pool: 0xffff94895ed43c50 | file object: 0xffff94895ed43cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed43de0 | file object: 0xffff94895ed43e60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\devenv.exe pool: 0xffff94895ed44100 | file object: 0xffff94895ed44180 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\pris\resources.en-US.pri pool: 0xffff94895ed44290 | file object: 0xffff94895ed44310 | offsetby: 0x80 \Windows\System32\NPSM.dll pool: 0xffff94895ed44420 | file object: 0xffff94895ed444a0 | offsetby: 0x80 \Windows\System32\zipfldr.dll pool: 0xffff94895ed445b0 | file object: 0xffff94895ed44630 | offsetby: 0x80 \Program Files\Common Files\System\Ole DB\oledb32.dll pool: 0xffff94895ed44740 | file object: 0xffff94895ed447c0 | offsetby: 0x80 \Windows\System32\AboveLockAppHost.dll pool: 0xffff94895ed448d0 | file object: 0xffff94895ed44950 | offsetby: 0x80 \$Directory pool: 0xffff94895ed44a60 | file object: 0xffff94895ed44ae0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed44bf0 | file object: 0xffff94895ed44c70 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895ed44d80 | file object: 0xffff94895ed44e00 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\Code.exe pool: 0xffff94895ed450a0 | file object: 0xffff94895ed45120 | offsetby: 0x80 \Windows\System32\ngcpopkeysrv.dll pool: 0xffff94895ed45230 | file object: 0xffff94895ed452b0 | offsetby: 0x80 \Windows\SystemResources\zipfldr.dll.mun pool: 0xffff94895ed453c0 | file object: 0xffff94895ed45440 | offsetby: 0x80 \Windows\System32\vbsapi.dll pool: 0xffff94895ed45550 | file object: 0xffff94895ed455d0 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Store.dll pool: 0xffff94895ed456e0 | file object: 0xffff94895ed45760 | offsetby: 0x80 \Windows\System32\SecurityCenterBroker.dll pool: 0xffff94895ed45870 | file object: 0xffff94895ed458f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_44.18362.449.0_neutral__8wekyb3d8bbwe\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895ed45a00 | file object: 0xffff94895ed45a80 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 pool: 0xffff94895ed45b90 | file object: 0xffff94895ed45c10 | offsetby: 0x80 \Windows\System32\en-US\twinui.pcshell.dll.mui pool: 0xffff94895ed45d20 | file object: 0xffff94895ed45da0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\resources.pri pool: 0xffff94895ed46040 | file object: 0xffff94895ed460c0 | offsetby: 0x80 \Windows\System32\Windows.Security.Integrity.dll pool: 0xffff94895ed461d0 | file object: 0xffff94895ed46250 | offsetby: 0x80 \Windows\System32\en-US\zipfldr.dll.mui pool: 0xffff94895ed46360 | file object: 0xffff94895ed463e0 | offsetby: 0x80 \Windows\rescache\_merged\1198001884\1920459783.pri pool: 0xffff94895ed464f0 | file object: 0xffff94895ed46570 | offsetby: 0x80 \$Directory pool: 0xffff94895ed46680 | file object: 0xffff94895ed46700 | offsetby: 0x80 \$Directory pool: 0xffff94895ed46810 | file object: 0xffff94895ed46890 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed469a0 | file object: 0xffff94895ed46a20 | offsetby: 0x80 \$Directory pool: 0xffff94895ed46b30 | file object: 0xffff94895ed46bb0 | offsetby: 0x80 \Windows\SystemResources\ShellComponents\ShellComponents.pri pool: 0xffff94895ed46cc0 | file object: 0xffff94895ed46d40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed46e50 | file object: 0xffff94895ed46ed0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed47170 | file object: 0xffff94895ed471f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed47300 | file object: 0xffff94895ed47380 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\devenv.exe.config pool: 0xffff94895ed47490 | file object: 0xffff94895ed47510 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed47620 | file object: 0xffff94895ed476a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed477b0 | file object: 0xffff94895ed47830 | offsetby: 0x80 \$Directory pool: 0xffff94895ed47940 | file object: 0xffff94895ed479c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed47ad0 | file object: 0xffff94895ed47b50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed47c60 | file object: 0xffff94895ed47ce0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db pool: 0xffff94895ed47df0 | file object: 0xffff94895ed47e70 | offsetby: 0x80 \Windows\System32\NotificationController.dll pool: 0xffff94895ed48110 | file object: 0xffff94895ed48190 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012.manifest pool: 0xffff94895ed482a0 | file object: 0xffff94895ed48320 | offsetby: 0x80 \$Directory pool: 0xffff94895ed48430 | file object: 0xffff94895ed484b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed485c0 | file object: 0xffff94895ed48640 | offsetby: 0x80 \$Directory pool: 0xffff94895ed48750 | file object: 0xffff94895ed487d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed488e0 | file object: 0xffff94895ed48960 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation.manifest pool: 0xffff94895ed48a70 | file object: 0xffff94895ed48af0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Publish.dll pool: 0xffff94895ed48c00 | file object: 0xffff94895ed48c80 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.752_en-us_447935a9543511ff.manifest pool: 0xffff94895ed48d90 | file object: 0xffff94895ed48e10 | offsetby: 0x80 \Windows\System32\dui70.dll pool: 0xffff94895ed490b0 | file object: 0xffff94895ed49130 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat pool: 0xffff94895ed49240 | file object: 0xffff94895ed492c0 | offsetby: 0x80 \Windows\System32\Windows.Shell.BlueLightReduction.dll pool: 0xffff94895ed493d0 | file object: 0xffff94895ed49450 | offsetby: 0x80 \Windows\System32\Windows.Internal.Signals.dll pool: 0xffff94895ed49560 | file object: 0xffff94895ed495e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dte90a.olb.manifest pool: 0xffff94895ed496f0 | file object: 0xffff94895ed49770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties100.tlb.manifest pool: 0xffff94895ed49880 | file object: 0xffff94895ed49900 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\DiagnosticsTap.dll.manifest pool: 0xffff94895ed49a10 | file object: 0xffff94895ed49a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed49ba0 | file object: 0xffff94895ed49c20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dte100.olb.manifest pool: 0xffff94895ed49d30 | file object: 0xffff94895ed49db0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed4a050 | file object: 0xffff94895ed4a0d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\csiface.tlb.manifest pool: 0xffff94895ed4a1e0 | file object: 0xffff94895ed4a260 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dsref80.dll.manifest pool: 0xffff94895ed4a370 | file object: 0xffff94895ed4a3f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties90a.tlb.manifest pool: 0xffff94895ed4a500 | file object: 0xffff94895ed4a580 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\contextp.dll.manifest pool: 0xffff94895ed4a690 | file object: 0xffff94895ed4a710 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msdia140.dll.manifest pool: 0xffff94895ed4a820 | file object: 0xffff94895ed4a8a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dte80.olb.manifest pool: 0xffff94895ed4a9b0 | file object: 0xffff94895ed4aa30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dte80a.olb.manifest pool: 0xffff94895ed4ab40 | file object: 0xffff94895ed4abc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Packages\fpeditax.dll.manifest pool: 0xffff94895ed4acd0 | file object: 0xffff94895ed4ad50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties90.tlb.manifest pool: 0xffff94895ed4ae60 | file object: 0xffff94895ed4aee0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\Microsoft.VisualStudio.ProductKeyDialog.tlb.manifest pool: 0xffff94895ed4b180 | file object: 0xffff94895ed4b200 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties.tlb.manifest pool: 0xffff94895ed4b310 | file object: 0xffff94895ed4b390 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\adodb.manifest pool: 0xffff94895ed4b4a0 | file object: 0xffff94895ed4b520 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties120.tlb.manifest pool: 0xffff94895ed4b630 | file object: 0xffff94895ed4b6b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\Microsoft.VisualStudio.CompilerHostObjectsProxy.dll.manifest pool: 0xffff94895ed4b7c0 | file object: 0xffff94895ed4b840 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895ed4b950 | file object: 0xffff94895ed4b9d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Publish.manifest pool: 0xffff94895ed4bae0 | file object: 0xffff94895ed4bb60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dteproperties110.tlb.manifest pool: 0xffff94895ed4bc70 | file object: 0xffff94895ed4bcf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\DebuggerProxy.dll.manifest pool: 0xffff94895ed4be00 | file object: 0xffff94895ed4be80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\CSCodeModelExtensibility.tlb.manifest pool: 0xffff94895ed4c120 | file object: 0xffff94895ed4c1a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\clientbuildmgr.tlb.manifest pool: 0xffff94895ed4c2b0 | file object: 0xffff94895ed4c330 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\coloader80.dll.manifest pool: 0xffff94895ed4c440 | file object: 0xffff94895ed4c4c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\dte90.olb.manifest pool: 0xffff94895ed4c5d0 | file object: 0xffff94895ed4c650 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.QualityTools.Wizard.TestProjectWizards.manifest pool: 0xffff94895ed4c760 | file object: 0xffff94895ed4c7e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv80p.dll.manifest pool: 0xffff94895ed4c8f0 | file object: 0xffff94895ed4c970 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\publish.tlb.manifest pool: 0xffff94895ed4ca80 | file object: 0xffff94895ed4cb00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenvp.dll.manifest pool: 0xffff94895ed4cc10 | file object: 0xffff94895ed4cc90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv90p.dll.manifest pool: 0xffff94895ed4cda0 | file object: 0xffff94895ed4ce20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv155p.dll.manifest pool: 0xffff94895ed4d0c0 | file object: 0xffff94895ed4d140 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv120p.dll.manifest pool: 0xffff94895ed4d250 | file object: 0xffff94895ed4d2d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VS SCC\msemp.dll.manifest pool: 0xffff94895ed4d3e0 | file object: 0xffff94895ed4d460 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv121p.dll.manifest pool: 0xffff94895ed4d570 | file object: 0xffff94895ed4d5f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv150p.dll.manifest pool: 0xffff94895ed4d700 | file object: 0xffff94895ed4d780 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv158p.dll.manifest pool: 0xffff94895ed4d890 | file object: 0xffff94895ed4d910 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv151p.dll.manifest pool: 0xffff94895ed4da20 | file object: 0xffff94895ed4daa0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv16p.dll.manifest pool: 0xffff94895ed4dbb0 | file object: 0xffff94895ed4dc30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv141p.dll.manifest pool: 0xffff94895ed4dd40 | file object: 0xffff94895ed4ddc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\stanpackage.manifest pool: 0xffff94895ed4e060 | file object: 0xffff94895ed4e0e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Packages\mswebprj.dll.manifest pool: 0xffff94895ed4e1f0 | file object: 0xffff94895ed4e270 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv159p.dll.manifest pool: 0xffff94895ed4e380 | file object: 0xffff94895ed4e400 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\textmgrp.dll.manifest pool: 0xffff94895ed4e510 | file object: 0xffff94895ed4e590 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv140p.dll.manifest pool: 0xffff94895ed4e6a0 | file object: 0xffff94895ed4e720 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VBCodeModelExtensibility.tlb.manifest pool: 0xffff94895ed4e830 | file object: 0xffff94895ed4e8b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VCSharpExtensibilityLib.tlb.manifest pool: 0xffff94895ed4e9c0 | file object: 0xffff94895ed4ea40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv157p.dll.manifest pool: 0xffff94895ed4eb50 | file object: 0xffff94895ed4ebd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VSDebug.dll.manifest pool: 0xffff94895ed4ece0 | file object: 0xffff94895ed4ed60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Tools\VDT\vdt80.dll.manifest pool: 0xffff94895ed4ee70 | file object: 0xffff94895ed4eef0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vsext.olb.manifest pool: 0xffff94895ed4f000 | file object: 0xffff94895ed4f080 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv156p.dll.manifest pool: 0xffff94895ed4f190 | file object: 0xffff94895ed4f210 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv100p.dll.manifest pool: 0xffff94895ed4f320 | file object: 0xffff94895ed4f3a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv110p.dll.manifest pool: 0xffff94895ed4f4b0 | file object: 0xffff94895ed4f530 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv2p.dll.manifest pool: 0xffff94895ed4f640 | file object: 0xffff94895ed4f6c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\msenv153p.dll.manifest pool: 0xffff94895ed4f7d0 | file object: 0xffff94895ed4f850 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vshelp.tlb.manifest pool: 0xffff94895ed4f960 | file object: 0xffff94895ed4f9e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\wfinterop.tlb.manifest pool: 0xffff94895ed4faf0 | file object: 0xffff94895ed4fb70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VsWizards.manifest pool: 0xffff94895ed4fc80 | file object: 0xffff94895ed4fd00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VxExtensibilityLib3.tlb.manifest pool: 0xffff94895ed4fe10 | file object: 0xffff94895ed4fe90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\WebProperties90.tlb.manifest pool: 0xffff94895ed50130 | file object: 0xffff94895ed501b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\ssdebugps.dll.manifest pool: 0xffff94895ed502c0 | file object: 0xffff94895ed50340 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed50450 | file object: 0xffff94895ed504d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vsmso.olb.manifest pool: 0xffff94895ed505e0 | file object: 0xffff94895ed50660 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db pool: 0xffff94895ed50770 | file object: 0xffff94895ed507f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VxExtensibilityLib4.tlb.manifest pool: 0xffff94895ed50900 | file object: 0xffff94895ed50980 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed50a90 | file object: 0xffff94895ed50b10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj110.olb.manifest pool: 0xffff94895ed50c20 | file object: 0xffff94895ed50ca0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed50db0 | file object: 0xffff94895ed50e30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VxExtensibilityLib2.tlb.manifest pool: 0xffff94895ed510d0 | file object: 0xffff94895ed51150 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj140.olb.manifest pool: 0xffff94895ed51260 | file object: 0xffff94895ed512e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\WebProperties110.tlb.manifest pool: 0xffff94895ed513f0 | file object: 0xffff94895ed51470 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VxExtensibilityLib.tlb.manifest pool: 0xffff94895ed51580 | file object: 0xffff94895ed51600 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed51710 | file object: 0xffff94895ed51790 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\WebProperties100.tlb.manifest pool: 0xffff94895ed518a0 | file object: 0xffff94895ed51920 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj.olb.manifest pool: 0xffff94895ed51a30 | file object: 0xffff94895ed51ab0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\VsLogP.dll.manifest pool: 0xffff94895ed51bc0 | file object: 0xffff94895ed51c40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj100.olb.manifest pool: 0xffff94895ed51d50 | file object: 0xffff94895ed51dd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vsprojhostproc.olb.manifest pool: 0xffff94895ed52070 | file object: 0xffff94895ed520f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj2.olb.manifest pool: 0xffff94895ed52200 | file object: 0xffff94895ed52280 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj80.olb.manifest pool: 0xffff94895ed52390 | file object: 0xffff94895ed52410 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vshelp80.tlb.manifest pool: 0xffff94895ed52520 | file object: 0xffff94895ed525a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\vslangproj90.olb.manifest pool: 0xffff94895ed526b0 | file object: 0xffff94895ed52730 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Automation\WebProperties.tlb.manifest pool: 0xffff94895ed52840 | file object: 0xffff94895ed528c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VC\vc.manifest pool: 0xffff94895ed529d0 | file object: 0xffff94895ed52a50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VC\dircontrol.manifest pool: 0xffff94895ed52b60 | file object: 0xffff94895ed52be0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed52cf0 | file object: 0xffff94895ed52d70 | offsetby: 0x80 \Windows\System32\ContentDeliveryManager.Utilities.dll pool: 0xffff94895ed53010 | file object: 0xffff94895ed53090 | offsetby: 0x80 \$Directory pool: 0xffff94895ed531a0 | file object: 0xffff94895ed53220 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal pool: 0xffff94895ed53330 | file object: 0xffff94895ed533b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\StandaloneUpdater-2020-06-04.0625.5652.1.odlgz04.0625. pool: 0xffff94895ed534c0 | file object: 0xffff94895ed53540 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\Logs\edb00047.l pool: 0xffff94895ed53650 | file object: 0xffff94895ed536d0 | offsetby: 0x80 \Windows\SysWOW64\srpapi.dll pool: 0xffff94895ed537e0 | file object: 0xffff94895ed53860 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Project\Microsoft.VisualStudio.Project.VisualC.VCProjectEngine.dll pool: 0xffff94895ed53970 | file object: 0xffff94895ed539f0 | offsetby: 0x80 \Windows\System32\Windows.CloudStore.Schema.Shell.dll pool: 0xffff94895ed53b00 | file object: 0xffff94895ed53b80 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db pool: 0xffff94895ed53c90 | file object: 0xffff94895ed53d10 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm pool: 0xffff94895ed53e20 | file object: 0xffff94895ed53ea0 | offsetby: 0x80 \Windows\System32\wpnapps.dll pool: 0xffff94895ed54140 | file object: 0xffff94895ed541c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed542d0 | file object: 0xffff94895ed54350 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895ed54460 | file object: 0xffff94895ed544e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pool: 0xffff94895ed545f0 | file object: 0xffff94895ed54670 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed54780 | file object: 0xffff94895ed54800 | offsetby: 0x80 \Windows\System32\en-US\netmsg.dll.mui pool: 0xffff94895ed54910 | file object: 0xffff94895ed54990 | offsetby: 0x80 \Windows\System32\en-US\QuietHours.dll.mui pool: 0xffff94895ed54aa0 | file object: 0xffff94895ed54b20 | offsetby: 0x80 \Windows\System32\wpnprv.dll pool: 0xffff94895ed54c30 | file object: 0xffff94895ed54cb0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\7997414b18a4b905cf75b21f81ad7fd9f65e4693\fd128b2b49e043205b62b266d4f7364793c05fd003b696ef17efb43becf9384c pool: 0xffff94895ed54dc0 | file object: 0xffff94895ed54e40 | offsetby: 0x80 \Windows\System32\wpnclient.dll pool: 0xffff94895ed550e0 | file object: 0xffff94895ed55160 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed55270 | file object: 0xffff94895ed552f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed55400 | file object: 0xffff94895ed55480 | offsetby: 0x80 \Windows\SysWOW64\ieframe.dll pool: 0xffff94895ed55590 | file object: 0xffff94895ed55610 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db pool: 0xffff94895ed55720 | file object: 0xffff94895ed557a0 | offsetby: 0x80 \Windows\System32\windows.applicationmodel.datatransfer.dll pool: 0xffff94895ed558b0 | file object: 0xffff94895ed55930 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgeSquare44x44.scale-100.png pool: 0xffff94895ed55a40 | file object: 0xffff94895ed55ac0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat pool: 0xffff94895ed55bd0 | file object: 0xffff94895ed55c50 | offsetby: 0x80 \Windows\System32\en-US\windows.ui.xaml.dll.mui pool: 0xffff94895ed55d60 | file object: 0xffff94895ed55de0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed56080 | file object: 0xffff94895ed56100 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch pool: 0xffff94895ed56210 | file object: 0xffff94895ed56290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed563a0 | file object: 0xffff94895ed56420 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\V01.log pool: 0xffff94895ed56530 | file object: 0xffff94895ed565b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed566c0 | file object: 0xffff94895ed56740 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCacheLock.dat pool: 0xffff94895ed56850 | file object: 0xffff94895ed568d0 | offsetby: 0x80 \Windows\System32\MusNotificationUx.exe pool: 0xffff94895ed569e0 | file object: 0xffff94895ed56a60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed56b70 | file object: 0xffff94895ed56bf0 | offsetby: 0x80 \Windows\System32\en-US\SecurityHealthAgent.dll.mui pool: 0xffff94895ed56d00 | file object: 0xffff94895ed56d80 | offsetby: 0x80 \Windows\System32\dimsjob.dll pool: 0xffff94895ed57020 | file object: 0xffff94895ed570a0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed571b0 | file object: 0xffff94895ed57230 | offsetby: 0x80 \$Directory pool: 0xffff94895ed57340 | file object: 0xffff94895ed573c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_5.2002.431.0_x64__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895ed574d0 | file object: 0xffff94895ed57550 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 pool: 0xffff94895ed57660 | file object: 0xffff94895ed576e0 | offsetby: 0x80 \Windows\System32\en-US\MusNotificationUx.exe.mui pool: 0xffff94895ed577f0 | file object: 0xffff94895ed57870 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895ed57980 | file object: 0xffff94895ed57a00 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895ed57b10 | file object: 0xffff94895ed57b90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed57ca0 | file object: 0xffff94895ed57d20 | offsetby: 0x80 \Windows\System32\mlang.dll pool: 0xffff94895ed57e30 | file object: 0xffff94895ed57eb0 | offsetby: 0x80 \Windows\System32\en-US\winnlsres.dll.mui pool: 0xffff94895ed58150 | file object: 0xffff94895ed581d0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 pool: 0xffff94895ed582e0 | file object: 0xffff94895ed58360 | offsetby: 0x80 \Windows\System32\NotificationControllerPS.dll pool: 0xffff94895ed58470 | file object: 0xffff94895ed584f0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.OneConnect_5.2002.431.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3234566417-3121902272-2793192418-1001-MergedResources-1.pri pool: 0xffff94895ed58600 | file object: 0xffff94895ed58680 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 pool: 0xffff94895ed58790 | file object: 0xffff94895ed58810 | offsetby: 0x80 \Windows\System32\SecurityHealthAgent.dll pool: 0xffff94895ed58920 | file object: 0xffff94895ed589a0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895ed58ab0 | file object: 0xffff94895ed58b30 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 pool: 0xffff94895ed58c40 | file object: 0xffff94895ed58cc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Microsoft.VisualStudio.Setup.dll pool: 0xffff94895ed58dd0 | file object: 0xffff94895ed58e50 | offsetby: 0x80 \Windows\System32\TaskFlowDataEngine.dll pool: 0xffff94895ed590f0 | file object: 0xffff94895ed59170 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed59280 | file object: 0xffff94895ed59300 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\L.User\ActivitiesCache.db-shm pool: 0xffff94895ed59410 | file object: 0xffff94895ed59490 | offsetby: 0x80 \Windows\INF\cmbatt.PNF pool: 0xffff94895ed595a0 | file object: 0xffff94895ed59620 | offsetby: 0x80 \Windows\INF\flpydisk.PNF pool: 0xffff94895ed59730 | file object: 0xffff94895ed597b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\{384756BA-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db pool: 0xffff94895ed598c0 | file object: 0xffff94895ed59940 | offsetby: 0x80 \Windows\INF\volmgr.PNF pool: 0xffff94895ed59a50 | file object: 0xffff94895ed59ad0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pool: 0xffff94895ed59be0 | file object: 0xffff94895ed59c60 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\V01.log pool: 0xffff94895ed59d70 | file object: 0xffff94895ed59df0 | offsetby: 0x80 \Windows\System32\utcutil.dll pool: 0xffff94895ed5a090 | file object: 0xffff94895ed5a110 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pool: 0xffff94895ed5a220 | file object: 0xffff94895ed5a2a0 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\L.User\ActivitiesCache.db pool: 0xffff94895ed5a3b0 | file object: 0xffff94895ed5a430 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed5a540 | file object: 0xffff94895ed5a5c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed5a6d0 | file object: 0xffff94895ed5a750 | offsetby: 0x80 \$Directory pool: 0xffff94895ed5a860 | file object: 0xffff94895ed5a8e0 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\L.User\ActivitiesCache.db-wal pool: 0xffff94895ed5a9f0 | file object: 0xffff94895ed5aa70 | offsetby: 0x80 \Windows\System32\Windows.Data.Activities.dll pool: 0xffff94895ed5ab80 | file object: 0xffff94895ed5ac00 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm pool: 0xffff94895ed5ad10 | file object: 0xffff94895ed5ad90 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\WebCache\V01.chk pool: 0xffff94895ed5b030 | file object: 0xffff94895ed5b0b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed5b1c0 | file object: 0xffff94895ed5b240 | offsetby: 0x80 \$Directory pool: 0xffff94895ed5b350 | file object: 0xffff94895ed5b3d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed5b4e0 | file object: 0xffff94895ed5b560 | offsetby: 0x80 \Users\User\AppData\Local\ConnectedDevicesPlatform\L.User.cdp pool: 0xffff94895ed5b670 | file object: 0xffff94895ed5b6f0 | offsetby: 0x80 \Windows\INF\wvmic_ext.PNF pool: 0xffff94895ed5b800 | file object: 0xffff94895ed5b880 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed5b990 | file object: 0xffff94895ed5ba10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed5bb20 | file object: 0xffff94895ed5bba0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed5bcb0 | file object: 0xffff94895ed5bd30 | offsetby: 0x80 \Windows\INF\machine.PNF pool: 0xffff94895ed5be40 | file object: 0xffff94895ed5bec0 | offsetby: 0x80 \Windows\INF\monitor.PNF pool: 0xffff94895ed5c160 | file object: 0xffff94895ed5c1e0 | offsetby: 0x80 \Windows\INF\basicdisplay.PNF pool: 0xffff94895ed5c2f0 | file object: 0xffff94895ed5c370 | offsetby: 0x80 \Windows\INF\mshdc.PNF pool: 0xffff94895ed5c480 | file object: 0xffff94895ed5c500 | offsetby: 0x80 \Windows\INF\termkbd.PNF pool: 0xffff94895ed5c610 | file object: 0xffff94895ed5c690 | offsetby: 0x80 \Windows\INF\wvmic_timesync.PNF pool: 0xffff94895ed5c7a0 | file object: 0xffff94895ed5c820 | offsetby: 0x80 \Windows\INF\wvmbusvideo.PNF pool: 0xffff94895ed5c930 | file object: 0xffff94895ed5c9b0 | offsetby: 0x80 \Windows\INF\wvmbus.PNF pool: 0xffff94895ed5cac0 | file object: 0xffff94895ed5cb40 | offsetby: 0x80 \Windows\INF\hal.PNF pool: 0xffff94895ed5cc50 | file object: 0xffff94895ed5ccd0 | offsetby: 0x80 \Windows\INF\usbport.PNF pool: 0xffff94895ed5cde0 | file object: 0xffff94895ed5ce60 | offsetby: 0x80 \Windows\INF\pci.PNF pool: 0xffff94895ed5d100 | file object: 0xffff94895ed5d180 | offsetby: 0x80 \Windows\INF\hdaudio.PNF pool: 0xffff94895ed5d290 | file object: 0xffff94895ed5d310 | offsetby: 0x80 \Windows\INF\oem3.PNF pool: 0xffff94895ed5d420 | file object: 0xffff94895ed5d4a0 | offsetby: 0x80 \Windows\INF\wvmic_shutdown.PNF pool: 0xffff94895ed5d5b0 | file object: 0xffff94895ed5d630 | offsetby: 0x80 \Windows\INF\oem2.PNF pool: 0xffff94895ed5d740 | file object: 0xffff94895ed5d7c0 | offsetby: 0x80 \Windows\INF\acpi.PNF pool: 0xffff94895ed5d8d0 | file object: 0xffff94895ed5d950 | offsetby: 0x80 \Windows\INF\umbus.PNF pool: 0xffff94895ed5da60 | file object: 0xffff94895ed5dae0 | offsetby: 0x80 \Windows\INF\spaceport.PNF pool: 0xffff94895ed5dbf0 | file object: 0xffff94895ed5dc70 | offsetby: 0x80 \Windows\INF\basicrender.PNF pool: 0xffff94895ed5dd80 | file object: 0xffff94895ed5de00 | offsetby: 0x80 \Windows\INF\keyboard.PNF pool: 0xffff94895ed5e0a0 | file object: 0xffff94895ed5e120 | offsetby: 0x80 \Windows\INF\msmouse.PNF pool: 0xffff94895ed5e230 | file object: 0xffff94895ed5e2b0 | offsetby: 0x80 \Windows\INF\wvid.PNF pool: 0xffff94895ed5e3c0 | file object: 0xffff94895ed5e440 | offsetby: 0x80 \Windows\INF\compositebus.PNF pool: 0xffff94895ed5e550 | file object: 0xffff94895ed5e5d0 | offsetby: 0x80 \Windows\INF\fdc.PNF pool: 0xffff94895ed5e6e0 | file object: 0xffff94895ed5e760 | offsetby: 0x80 \Windows\INF\termmou.PNF pool: 0xffff94895ed5e870 | file object: 0xffff94895ed5e8f0 | offsetby: 0x80 \Windows\INF\volume.PNF pool: 0xffff94895ed5ea00 | file object: 0xffff94895ed5ea80 | offsetby: 0x80 \Windows\System32\Windows.UI.Core.TextInput.dll pool: 0xffff94895ed5eb90 | file object: 0xffff94895ed5ec10 | offsetby: 0x80 \Windows\INF\vdrvroot.PNF pool: 0xffff94895ed5ed20 | file object: 0xffff94895ed5eda0 | offsetby: 0x80 \Windows\INF\whyperkbd.PNF pool: 0xffff94895ed5f040 | file object: 0xffff94895ed5f0c0 | offsetby: 0x80 \Windows\INF\input.PNF pool: 0xffff94895ed5f1d0 | file object: 0xffff94895ed5f250 | offsetby: 0x80 \Windows\INF\ChargeArbitration.PNF pool: 0xffff94895ed5f360 | file object: 0xffff94895ed5f3e0 | offsetby: 0x80 \Windows\INF\wvmic_heartbeat.PNF pool: 0xffff94895ed5f4f0 | file object: 0xffff94895ed5f570 | offsetby: 0x80 \Windows\INF\rdpbus.PNF pool: 0xffff94895ed5f680 | file object: 0xffff94895ed5f700 | offsetby: 0x80 \Windows\System32\PCShellCommonProxyStub.dll pool: 0xffff94895ed5f810 | file object: 0xffff94895ed5f890 | offsetby: 0x80 \Windows\INF\ws3cap.PNF pool: 0xffff94895ed5f9a0 | file object: 0xffff94895ed5fa20 | offsetby: 0x80 \$Directory pool: 0xffff94895ed5fb30 | file object: 0xffff94895ed5fbb0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed5fcc0 | file object: 0xffff94895ed5fd40 | offsetby: 0x80 \Windows\INF\tsusbhub.PNF pool: 0xffff94895ed5fe50 | file object: 0xffff94895ed5fed0 | offsetby: 0x80 \Windows\INF\mssmbios.PNF pool: 0xffff94895ed60170 | file object: 0xffff94895ed601f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed60300 | file object: 0xffff94895ed60380 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgeFile.targetsize-48.png pool: 0xffff94895ed60490 | file object: 0xffff94895ed60510 | offsetby: 0x80 \Windows\System32\en-US\SHCore.dll.mui pool: 0xffff94895ed60620 | file object: 0xffff94895ed606a0 | offsetby: 0x80 \Windows\System32\elsTrans.dll pool: 0xffff94895ed607b0 | file object: 0xffff94895ed60830 | offsetby: 0x80 \Windows\INF\hdaudbus.PNF pool: 0xffff94895ed60940 | file object: 0xffff94895ed609c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895ed60ad0 | file object: 0xffff94895ed60b50 | offsetby: 0x80 \Windows\System32\ShellCommonCommonProxyStub.dll pool: 0xffff94895ed60c60 | file object: 0xffff94895ed60ce0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed60df0 | file object: 0xffff94895ed60e70 | offsetby: 0x80 \Windows\System32\SIHClient.exe pool: 0xffff94895ed61110 | file object: 0xffff94895ed61190 | offsetby: 0x80 \Windows\System32\elsTrans.dll pool: 0xffff94895ed612a0 | file object: 0xffff94895ed61320 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed61430 | file object: 0xffff94895ed614b0 | offsetby: 0x80 \Windows\INF\wvmic_kvpexchange.PNF pool: 0xffff94895ed615c0 | file object: 0xffff94895ed61640 | offsetby: 0x80 \Windows\SysWOW64\wldp.dll pool: 0xffff94895ed61750 | file object: 0xffff94895ed617d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed618e0 | file object: 0xffff94895ed61960 | offsetby: 0x80 \Windows\System32\en-US\elscore.dll.mui pool: 0xffff94895ed61a70 | file object: 0xffff94895ed61af0 | offsetby: 0x80 \Windows\System32\ELSCore.dll pool: 0xffff94895ed61c00 | file object: 0xffff94895ed61c80 | offsetby: 0x80 \Windows\INF\wgencounter.PNF pool: 0xffff94895ed61d90 | file object: 0xffff94895ed61e10 | offsetby: 0x80 \$Directory pool: 0xffff94895ed620b0 | file object: 0xffff94895ed62130 | offsetby: 0x80 \Windows\INF\wvmbushid.PNF pool: 0xffff94895ed62240 | file object: 0xffff94895ed622c0 | offsetby: 0x80 \Windows\INF\wstorvsc.PNF pool: 0xffff94895ed623d0 | file object: 0xffff94895ed62450 | offsetby: 0x80 \Windows\INF\ndisvirtualbus.PNF pool: 0xffff94895ed62560 | file object: 0xffff94895ed625e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed626f0 | file object: 0xffff94895ed62770 | offsetby: 0x80 \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys34-73a32824f pool: 0xffff94895ed62880 | file object: 0xffff94895ed62900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed62a10 | file object: 0xffff94895ed62a90 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy pool: 0xffff94895ed62ba0 | file object: 0xffff94895ed62c20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed62d30 | file object: 0xffff94895ed62db0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat pool: 0xffff94895ed63050 | file object: 0xffff94895ed630d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed631e0 | file object: 0xffff94895ed63260 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed63370 | file object: 0xffff94895ed633f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 pool: 0xffff94895ed63500 | file object: 0xffff94895ed63580 | offsetby: 0x80 \Windows\System32\LicenseManagerApi.dll pool: 0xffff94895ed63690 | file object: 0xffff94895ed63710 | offsetby: 0x80 \Windows\System32\en-US\winnlsres.dll.mui pool: 0xffff94895ed63820 | file object: 0xffff94895ed638a0 | offsetby: 0x80 \Windows\Prefetch\STARTMENUEXPERIENCEHOST.EXE-4612B8FC.pf pool: 0xffff94895ed639b0 | file object: 0xffff94895ed63a30 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe pool: 0xffff94895ed63b40 | file object: 0xffff94895ed63bc0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.18362.449_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG2 pool: 0xffff94895ed63cd0 | file object: 0xffff94895ed63d50 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Microsoft.Onecore.StorageManagement~~1.0.mum pool: 0xffff94895ed63e60 | file object: 0xffff94895ed63ee0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed64180 | file object: 0xffff94895ed64200 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe pool: 0xffff94895ed64310 | file object: 0xffff94895ed64390 | offsetby: 0x80 \Windows\System32\fontgroupsoverride.dll pool: 0xffff94895ed644a0 | file object: 0xffff94895ed64520 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895ed64630 | file object: 0xffff94895ed646b0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed647c0 | file object: 0xffff94895ed64840 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-11FFA705.pf pool: 0xffff94895ed64950 | file object: 0xffff94895ed649d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed64ae0 | file object: 0xffff94895ed64b60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed64c70 | file object: 0xffff94895ed64cf0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed64e00 | file object: 0xffff94895ed64e80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed65120 | file object: 0xffff94895ed651a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed652b0 | file object: 0xffff94895ed65330 | offsetby: 0x80 \Windows\System32\Windows.Services.TargetedContent.dll pool: 0xffff94895ed65440 | file object: 0xffff94895ed654c0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed655d0 | file object: 0xffff94895ed65650 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed65760 | file object: 0xffff94895ed657e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed658f0 | file object: 0xffff94895ed65970 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed65a80 | file object: 0xffff94895ed65b00 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895ed65c10 | file object: 0xffff94895ed65c90 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Microsoft.Windows.StorageManagement~~1.0.mum pool: 0xffff94895ed65da0 | file object: 0xffff94895ed65e20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed660c0 | file object: 0xffff94895ed66140 | offsetby: 0x80 \Windows\rescache\_merged\4124255888\2684418851.pri pool: 0xffff94895ed66250 | file object: 0xffff94895ed662d0 | offsetby: 0x80 \Windows\System32\Windows.Networking.Sockets.PushEnabledApplication.dll pool: 0xffff94895ed663e0 | file object: 0xffff94895ed66460 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-D2CDAE5C.pf pool: 0xffff94895ed66570 | file object: 0xffff94895ed665f0 | offsetby: 0x80 \Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\PSReadline.psm1\User Pinned\TaskBar\File Explorer.lnkage.json pool: 0xffff94895ed66700 | file object: 0xffff94895ed66780 | offsetby: 0x80 \$Directory pool: 0xffff94895ed66890 | file object: 0xffff94895ed66910 | offsetby: 0x80 \Windows\ShellExperiences\StartUI.dll pool: 0xffff94895ed66a20 | file object: 0xffff94895ed66aa0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed66bb0 | file object: 0xffff94895ed66c30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed66d40 | file object: 0xffff94895ed66dc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed67060 | file object: 0xffff94895ed670e0 | offsetby: 0x80 \Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll pool: 0xffff94895ed671f0 | file object: 0xffff94895ed67270 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed67380 | file object: 0xffff94895ed67400 | offsetby: 0x80 \Windows\System32\ngcsvc.dll pool: 0xffff94895ed67510 | file object: 0xffff94895ed67590 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx pool: 0xffff94895ed676a0 | file object: 0xffff94895ed67720 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontSet-S-1-5-21-3234566417-3121902272-2793192418-1001.dat pool: 0xffff94895ed67830 | file object: 0xffff94895ed678b0 | offsetby: 0x80 \Windows\System32\ngcsvc.dll pool: 0xffff94895ed679c0 | file object: 0xffff94895ed67a40 | offsetby: 0x80 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-3234566417-3121902272-2793192418-1001.dat pool: 0xffff94895ed67b50 | file object: 0xffff94895ed67bd0 | offsetby: 0x80 \Windows\System32\en-US\ngcsvc.dll.mui pool: 0xffff94895ed67ce0 | file object: 0xffff94895ed67d60 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Microsoft.WebDriver~~1.0.mum pool: 0xffff94895ed67e70 | file object: 0xffff94895ed67ef0 | offsetby: 0x80 \Windows\Prefetch\SEARCHUI.EXE-E4B0F2D1.pf pool: 0xffff94895ed68000 | file object: 0xffff94895ed68080 | offsetby: 0x80 \Windows\System32\en-US\winmm.dll.mui pool: 0xffff94895ed68190 | file object: 0xffff94895ed68210 | offsetby: 0x80 \Windows\System32\LicenseManager.dll pool: 0xffff94895ed68320 | file object: 0xffff94895ed683a0 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895ed684b0 | file object: 0xffff94895ed68530 | offsetby: 0x80 \$Directory pool: 0xffff94895ed68640 | file object: 0xffff94895ed686c0 | offsetby: 0x80 \Windows\ShellExperiences\StartUI.dll pool: 0xffff94895ed687d0 | file object: 0xffff94895ed68850 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri pool: 0xffff94895ed68960 | file object: 0xffff94895ed689e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed68af0 | file object: 0xffff94895ed68b70 | offsetby: 0x80 \Windows\System32\NgcCtnrSvc.dll pool: 0xffff94895ed68c80 | file object: 0xffff94895ed68d00 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommon\Windows.UI.ShellCommon.pri pool: 0xffff94895ed68e10 | file object: 0xffff94895ed68e90 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2 pool: 0xffff94895ed69130 | file object: 0xffff94895ed691b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed692c0 | file object: 0xffff94895ed69340 | offsetby: 0x80 \Windows\System32\NgcCtnrSvc.dll pool: 0xffff94895ed69450 | file object: 0xffff94895ed694d0 | offsetby: 0x80 \Windows\System32\Windows.Storage.ApplicationData.dll pool: 0xffff94895ed695e0 | file object: 0xffff94895ed69660 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895ed69770 | file object: 0xffff94895ed697f0 | offsetby: 0x80 \Windows\System32\en-US\NgcCtnrSvc.dll.mui pool: 0xffff94895ed69900 | file object: 0xffff94895ed69980 | offsetby: 0x80 \Windows\System32\ktmw32.dll pool: 0xffff94895ed69a90 | file object: 0xffff94895ed69b10 | offsetby: 0x80 \Windows\rescache\_merged\372897047\3260902778.pri pool: 0xffff94895ed69c20 | file object: 0xffff94895ed69ca0 | offsetby: 0x80 \Windows\System32\NgcCtnr.dll pool: 0xffff94895ed69db0 | file object: 0xffff94895ed69e30 | offsetby: 0x80 \Windows\System32\cflapi.dll pool: 0xffff94895ed6a0d0 | file object: 0xffff94895ed6a150 | offsetby: 0x80 \Windows\System32\ktmw32.dll pool: 0xffff94895ed6a260 | file object: 0xffff94895ed6a2e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db Code\resources\app\extensions\theme-monokai\pack pool: 0xffff94895ed6a3f0 | file object: 0xffff94895ed6a470 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat pool: 0xffff94895ed6a580 | file object: 0xffff94895ed6a600 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1 pool: 0xffff94895ed6a710 | file object: 0xffff94895ed6a790 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6a8a0 | file object: 0xffff94895ed6a920 | offsetby: 0x80 \Windows\System32\NgcCtnrGidsHandler.dll pool: 0xffff94895ed6aa30 | file object: 0xffff94895ed6aab0 | offsetby: 0x80 \Windows\System32\en-US\dsreg.dll.mui pool: 0xffff94895ed6abc0 | file object: 0xffff94895ed6ac40 | offsetby: 0x80 \Windows\System32\biwinrt.dll pool: 0xffff94895ed6ad50 | file object: 0xffff94895ed6add0 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895ed6b070 | file object: 0xffff94895ed6b0f0 | offsetby: 0x80 \Windows\System32\Windows.Storage.ApplicationData.dll pool: 0xffff94895ed6b200 | file object: 0xffff94895ed6b280 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\7997414b18a4b905cf75b21f81ad7fd9f65e4693\7997414b18a4b905cf75b21f81ad7fd9f65e4693.pieceshash pool: 0xffff94895ed6b390 | file object: 0xffff94895ed6b410 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6b520 | file object: 0xffff94895ed6b5a0 | offsetby: 0x80 \Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll pool: 0xffff94895ed6b6b0 | file object: 0xffff94895ed6b730 | offsetby: 0x80 \Windows\System32\NgcCtnrGidsHandler.dll pool: 0xffff94895ed6b840 | file object: 0xffff94895ed6b8c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed6b9d0 | file object: 0xffff94895ed6ba50 | offsetby: 0x80 \Windows\System32\NgcCtnr.dll pool: 0xffff94895ed6bb60 | file object: 0xffff94895ed6bbe0 | offsetby: 0x80 \Windows\System32\fontgroupsoverride.dll pool: 0xffff94895ed6bcf0 | file object: 0xffff94895ed6bd70 | offsetby: 0x80 \Windows\System32\Windows.Internal.Shell.Broker.dll pool: 0xffff94895ed6c010 | file object: 0xffff94895ed6c090 | offsetby: 0x80 \Windows\SysWOW64\jscript9.dll pool: 0xffff94895ed6c1a0 | file object: 0xffff94895ed6c220 | offsetby: 0x80 \Windows\System32\Windows.Shell.StartLayoutPopulationEvents.dll pool: 0xffff94895ed6c330 | file object: 0xffff94895ed6c3b0 | offsetby: 0x80 \Windows\System32\en-US\Windows.Globalization.dll.mui pool: 0xffff94895ed6c4c0 | file object: 0xffff94895ed6c540 | offsetby: 0x80 \Windows\Fonts\segoeuib.ttf pool: 0xffff94895ed6c650 | file object: 0xffff94895ed6c6d0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6c7e0 | file object: 0xffff94895ed6c860 | offsetby: 0x80 \Windows\System32\Windows.Globalization.Fontgroups.dll pool: 0xffff94895ed6c970 | file object: 0xffff94895ed6c9f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6cb00 | file object: 0xffff94895ed6cb80 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6cc90 | file object: 0xffff94895ed6cd10 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6ce20 | file object: 0xffff94895ed6cea0 | offsetby: 0x80 \Windows\System32\biwinrt.dll pool: 0xffff94895ed6d140 | file object: 0xffff94895ed6d1c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895ed6d2d0 | file object: 0xffff94895ed6d350 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6d460 | file object: 0xffff94895ed6d4e0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895ed6d5f0 | file object: 0xffff94895ed6d670 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ed6d780 | file object: 0xffff94895ed6d800 | offsetby: 0x80 \Windows\System32\Windows.Globalization.Fontgroups.dll pool: 0xffff94895ed6d910 | file object: 0xffff94895ed6d990 | offsetby: 0x80 \Windows\System32\Windows.Internal.Shell.Broker.dll pool: 0xffff94895ed6daa0 | file object: 0xffff94895ed6db20 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895ed6dc30 | file object: 0xffff94895ed6dcb0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6ddc0 | file object: 0xffff94895ed6de40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed6e0e0 | file object: 0xffff94895ed6e160 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommon\pris\Windows.UI.ShellCommon.en-US.pri pool: 0xffff94895ed6e270 | file object: 0xffff94895ed6e2f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6e400 | file object: 0xffff94895ed6e480 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6e590 | file object: 0xffff94895ed6e610 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6e720 | file object: 0xffff94895ed6e7a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6e8b0 | file object: 0xffff94895ed6e930 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat pool: 0xffff94895ed6ea40 | file object: 0xffff94895ed6eac0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6ebd0 | file object: 0xffff94895ed6ec50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6ed60 | file object: 0xffff94895ed6ede0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6f080 | file object: 0xffff94895ed6f100 | offsetby: 0x80 \$Directory pool: 0xffff94895ed6f210 | file object: 0xffff94895ed6f290 | offsetby: 0x80 \Windows\System32\irprops.cpl pool: 0xffff94895ed6f3a0 | file object: 0xffff94895ed6f420 | offsetby: 0x80 \Windows\System32\Windows.Services.TargetedContent.dll pool: 0xffff94895ed6f530 | file object: 0xffff94895ed6f5b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6f6c0 | file object: 0xffff94895ed6f740 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed6f850 | file object: 0xffff94895ed6f8d0 | offsetby: 0x80 \Windows\System32\RTMediaFrame.dll pool: 0xffff94895ed6f9e0 | file object: 0xffff94895ed6fa60 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommon\StartUI\Assets\Fonts\BitMDL2.ttf pool: 0xffff94895ed6fb70 | file object: 0xffff94895ed6fbf0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx pool: 0xffff94895ed6fd00 | file object: 0xffff94895ed6fd80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed70020 | file object: 0xffff94895ed700a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed701b0 | file object: 0xffff94895ed70230 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed70340 | file object: 0xffff94895ed703c0 | offsetby: 0x80 \Windows\System32\Windows.Media.Speech.dll pool: 0xffff94895ed704d0 | file object: 0xffff94895ed70550 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895ed70660 | file object: 0xffff94895ed706e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed707f0 | file object: 0xffff94895ed70870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed70980 | file object: 0xffff94895ed70a00 | offsetby: 0x80 \$Directory pool: 0xffff94895ed70b10 | file object: 0xffff94895ed70b90 | offsetby: 0x80 \$Directory pool: 0xffff94895ed70ca0 | file object: 0xffff94895ed70d20 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe pool: 0xffff94895ed70e30 | file object: 0xffff94895ed70eb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71150 | file object: 0xffff94895ed711d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Data.bin pool: 0xffff94895ed712e0 | file object: 0xffff94895ed71360 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfigurationClient.dll pool: 0xffff94895ed71470 | file object: 0xffff94895ed714f0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed71600 | file object: 0xffff94895ed71680 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71790 | file object: 0xffff94895ed71810 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71920 | file object: 0xffff94895ed719a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71ab0 | file object: 0xffff94895ed71b30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71c40 | file object: 0xffff94895ed71cc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed71dd0 | file object: 0xffff94895ed71e50 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Header.bin pool: 0xffff94895ed720f0 | file object: 0xffff94895ed72170 | offsetby: 0x80 \$Directory pool: 0xffff94895ed72280 | file object: 0xffff94895ed72300 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Foundation.winmd pool: 0xffff94895ed72410 | file object: 0xffff94895ed72490 | offsetby: 0x80 \Windows\System32\ActionMgr.dll pool: 0xffff94895ed725a0 | file object: 0xffff94895ed72620 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed72730 | file object: 0xffff94895ed727b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed728c0 | file object: 0xffff94895ed72940 | offsetby: 0x80 \Windows\System32\MicrosoftAccountWAMExtension.dll pool: 0xffff94895ed72a50 | file object: 0xffff94895ed72ad0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed72be0 | file object: 0xffff94895ed72c60 | offsetby: 0x80 \Windows\System32\Windows.UI.Input.Inking.dll pool: 0xffff94895ed72d70 | file object: 0xffff94895ed72df0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Tips.winmd pool: 0xffff94895ed73090 | file object: 0xffff94895ed73110 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll pool: 0xffff94895ed73220 | file object: 0xffff94895ed732a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed733b0 | file object: 0xffff94895ed73430 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Search.winmd pool: 0xffff94895ed73540 | file object: 0xffff94895ed735c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed736d0 | file object: 0xffff94895ed73750 | offsetby: 0x80 \Windows\System32\Windows.Cortana.PAL.Desktop.dll pool: 0xffff94895ed73860 | file object: 0xffff94895ed738e0 | offsetby: 0x80 \Windows\System32\ConstraintIndex.Search.dll pool: 0xffff94895ed739f0 | file object: 0xffff94895ed73a70 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.SPA.winmd pool: 0xffff94895ed73b80 | file object: 0xffff94895ed73c00 | offsetby: 0x80 \Windows\System32\notepad.exe pool: 0xffff94895ed73d10 | file object: 0xffff94895ed73d90 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll pool: 0xffff94895ed74030 | file object: 0xffff94895ed740b0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019\Visual Studio Tools\VC\x86_x64 Cross Tools Command Prompt for VS 2019.lnk pool: 0xffff94895ed741c0 | file object: 0xffff94895ed74240 | offsetby: 0x80 \$Directory pool: 0xffff94895ed74350 | file object: 0xffff94895ed743d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed744e0 | file object: 0xffff94895ed74560 | offsetby: 0x80 \Windows\System32\PersonaX.dll pool: 0xffff94895ed74670 | file object: 0xffff94895ed746f0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll pool: 0xffff94895ed74800 | file object: 0xffff94895ed74880 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Internal.Search.winmd pool: 0xffff94895ed74990 | file object: 0xffff94895ed74a10 | offsetby: 0x80 \Windows\System32\Speech_OneCore\common\sapi_onecore.dll pool: 0xffff94895ed74b20 | file object: 0xffff94895ed74ba0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed74cb0 | file object: 0xffff94895ed74d30 | offsetby: 0x80 \$Directory pool: 0xffff94895ed74e40 | file object: 0xffff94895ed74ec0 | offsetby: 0x80 \Windows\System32\UserDataTypeHelperUtil.dll pool: 0xffff94895ed75160 | file object: 0xffff94895ed751e0 | offsetby: 0x80 \Windows\System32\rometadata.dll pool: 0xffff94895ed752f0 | file object: 0xffff94895ed75370 | offsetby: 0x80 \Windows\System32\icuuc.dll pool: 0xffff94895ed75480 | file object: 0xffff94895ed75500 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed75610 | file object: 0xffff94895ed75690 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed757a0 | file object: 0xffff94895ed75820 | offsetby: 0x80 \$Directory pool: 0xffff94895ed75930 | file object: 0xffff94895ed759b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\UqCKuwgmukgkXfFOcl4KebRY5Mw[1].js pool: 0xffff94895ed75ac0 | file object: 0xffff94895ed75b40 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\HkpLvsXkCMkluzD--i9_Hl9v67o[1].js pool: 0xffff94895ed75c50 | file object: 0xffff94895ed75cd0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\kfPDEjYze6gcezDqunK1uiPHVSA[1].js pool: 0xffff94895ed75de0 | file object: 0xffff94895ed75e60 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\1DLLHrh5gD2BxyZsLN2_FxFV-Gc.br[1].js pool: 0xffff94895ed76100 | file object: 0xffff94895ed76180 | offsetby: 0x80 ⑐訧舎￿む悭钉￿㠸悭钉￿ﳘ pool: 0xffff94895ed76290 | file object: 0xffff94895ed76310 | offsetby: 0x80 \Windows\System32\Chakra.dll pool: 0xffff94895ed76420 | file object: 0xffff94895ed764a0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\2XH_n8suDzbjeZvT1Zj4HAqTI80[1].js pool: 0xffff94895ed765b0 | file object: 0xffff94895ed76630 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Tips.winmd pool: 0xffff94895ed76740 | file object: 0xffff94895ed767c0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Security.winmd pool: 0xffff94895ed768d0 | file object: 0xffff94895ed76950 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\H3Ssg8BFXUAUD1Jhomz9RV7YmVI[1].js pool: 0xffff94895ed76a60 | file object: 0xffff94895ed76ae0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\2FaIoK0yAWpnQZstRqy7tkRQRUg[1].js pool: 0xffff94895ed76bf0 | file object: 0xffff94895ed76c70 | offsetby: 0x80 \Windows\System32\EdgeManager.dll pool: 0xffff94895ed76d80 | file object: 0xffff94895ed76e00 | offsetby: 0x80 \Windows\System32\icuin.dll pool: 0xffff94895ed770a0 | file object: 0xffff94895ed77120 | offsetby: 0x80 \Windows\System32\UIAutomationCore.dll pool: 0xffff94895ed77230 | file object: 0xffff94895ed772b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\Dae9F3uWr1j96ciQZxvUiMLiQ20[1].js pool: 0xffff94895ed773c0 | file object: 0xffff94895ed77440 | offsetby: 0x80 \Windows\System32\icu.dll pool: 0xffff94895ed77550 | file object: 0xffff94895ed775d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\XnMU5VFfsdIh8PsWJJY6-SgHHjk.br[1].js pool: 0xffff94895ed776e0 | file object: 0xffff94895ed77760 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\UAraPktKl10pbSBJ1Tu-cJX2-nc[1].js pool: 0xffff94895ed77870 | file object: 0xffff94895ed778f0 | offsetby: 0x80 \Windows\System32\mssprxy.dll pool: 0xffff94895ed77a00 | file object: 0xffff94895ed77a80 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019\Visual Studio Tools\VC\x64 Native Tools Command Prompt for VS 2019.lnk pool: 0xffff94895ed77b90 | file object: 0xffff94895ed77c10 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Security.winmd pool: 0xffff94895ed77d20 | file object: 0xffff94895ed77da0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed78040 | file object: 0xffff94895ed780c0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db pool: 0xffff94895ed781d0 | file object: 0xffff94895ed78250 | offsetby: 0x80 \Windows\System32\edgehtml.dll pool: 0xffff94895ed78360 | file object: 0xffff94895ed783e0 | offsetby: 0x80 \Windows\System32\msdart.dll pool: 0xffff94895ed784f0 | file object: 0xffff94895ed78570 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Storage.winmd pool: 0xffff94895ed78680 | file object: 0xffff94895ed78700 | offsetby: 0x80 \Windows\System32\en-US\netmsg.dll.mui pool: 0xffff94895ed78810 | file object: 0xffff94895ed78890 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed789a0 | file object: 0xffff94895ed78a20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed78b30 | file object: 0xffff94895ed78bb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed78cc0 | file object: 0xffff94895ed78d40 | offsetby: 0x80 \$Directory pool: 0xffff94895ed78e50 | file object: 0xffff94895ed78ed0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe pool: 0xffff94895ed79170 | file object: 0xffff94895ed791f0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_2a285cc246691ef5\comctl32.dll pool: 0xffff94895ed79300 | file object: 0xffff94895ed79380 | offsetby: 0x80 \Windows\System32\SettingsEnvironment.Desktop.dll pool: 0xffff94895ed79490 | file object: 0xffff94895ed79510 | offsetby: 0x80 \Program Files\Common Files\System\Ole DB\oledb32r.dll pool: 0xffff94895ed79620 | file object: 0xffff94895ed796a0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed797b0 | file object: 0xffff94895ed79830 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.SPA.winmd pool: 0xffff94895ed79940 | file object: 0xffff94895ed799c0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895ed79ad0 | file object: 0xffff94895ed79b50 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe pool: 0xffff94895ed79c60 | file object: 0xffff94895ed79ce0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed79df0 | file object: 0xffff94895ed79e70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7a110 | file object: 0xffff94895ed7a190 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7a2a0 | file object: 0xffff94895ed7a320 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll pool: 0xffff94895ed7a430 | file object: 0xffff94895ed7a4b0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_2a285cc246691ef5 pool: 0xffff94895ed7a5c0 | file object: 0xffff94895ed7a640 | offsetby: 0x80 \Windows\System32\EthernetMediaManager.dll pool: 0xffff94895ed7a750 | file object: 0xffff94895ed7a7d0 | offsetby: 0x80 \Windows\System32\Windows.Storage.Search.dll pool: 0xffff94895ed7a8e0 | file object: 0xffff94895ed7a960 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe\KnownGameListRS4.bin pool: 0xffff94895ed7aa70 | file object: 0xffff94895ed7aaf0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll pool: 0xffff94895ed7ac00 | file object: 0xffff94895ed7ac80 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.jfm pool: 0xffff94895ed7ad90 | file object: 0xffff94895ed7ae10 | offsetby: 0x80 \Windows\System32\Windows.Cortana.OneCore.dll pool: 0xffff94895ed7b0b0 | file object: 0xffff94895ed7b130 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.System.winmd pool: 0xffff94895ed7b240 | file object: 0xffff94895ed7b2c0 | offsetby: 0x80 \Windows\System32\en-US\dnsapi.dll.mui pool: 0xffff94895ed7b3d0 | file object: 0xffff94895ed7b450 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7b560 | file object: 0xffff94895ed7b5e0 | offsetby: 0x80 \Windows\SysWOW64\msimtf.dll pool: 0xffff94895ed7b6f0 | file object: 0xffff94895ed7b770 | offsetby: 0x80 \Windows\rescache\_merged\1348407519\28789745.pri pool: 0xffff94895ed7b880 | file object: 0xffff94895ed7b900 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb000B3.jtx pool: 0xffff94895ed7ba10 | file object: 0xffff94895ed7ba90 | offsetby: 0x80 \Windows\SysWOW64\d2d1.dll pool: 0xffff94895ed7bba0 | file object: 0xffff94895ed7bc20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7bd30 | file object: 0xffff94895ed7bdb0 | offsetby: 0x80 \Windows\System32\ShellExperiences\WindowsInternal.Xaml.Controls.Tabs.dll pool: 0xffff94895ed7c050 | file object: 0xffff94895ed7c0d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_44.18362.449.0_neutral__8wekyb3d8bbwe\ActivationStore.dat.LOG1 pool: 0xffff94895ed7c1e0 | file object: 0xffff94895ed7c260 | offsetby: 0x80 \$Directory pool: 0xffff94895ed7c370 | file object: 0xffff94895ed7c3f0 | offsetby: 0x80 \Windows\System32\ieproxy.dll pool: 0xffff94895ed7c500 | file object: 0xffff94895ed7c580 | offsetby: 0x80 \Windows\System32\EthernetMediaManager.dll pool: 0xffff94895ed7c690 | file object: 0xffff94895ed7c710 | offsetby: 0x80 \Windows\System32\Windows.Web.Http.dll pool: 0xffff94895ed7c820 | file object: 0xffff94895ed7c8a0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb pool: 0xffff94895ed7c9b0 | file object: 0xffff94895ed7ca30 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_44.18362.449.0_neutral__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895ed7cb40 | file object: 0xffff94895ed7cbc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7ccd0 | file object: 0xffff94895ed7cd50 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-CF79EE4C.pf pool: 0xffff94895ed7ce60 | file object: 0xffff94895ed7cee0 | offsetby: 0x80 \Windows\System32\Windows.WARP.JITService.exe pool: 0xffff94895ed7d180 | file object: 0xffff94895ed7d200 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Core.dll pool: 0xffff94895ed7d310 | file object: 0xffff94895ed7d390 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7d4a0 | file object: 0xffff94895ed7d520 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll pool: 0xffff94895ed7d630 | file object: 0xffff94895ed7d6b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7d7c0 | file object: 0xffff94895ed7d840 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-B81C072C.pf pool: 0xffff94895ed7d950 | file object: 0xffff94895ed7d9d0 | offsetby: 0x80 \Windows\SysWOW64\ResourcePolicyClient.dll pool: 0xffff94895ed7dae0 | file object: 0xffff94895ed7db60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7dc70 | file object: 0xffff94895ed7dcf0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\NisSrv.exe pool: 0xffff94895ed7de00 | file object: 0xffff94895ed7de80 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_44.18362.449.0_neutral__8wekyb3d8bbwe\ActivationStore.dat.LOG2 pool: 0xffff94895ed7e120 | file object: 0xffff94895ed7e1a0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Web.winmd pool: 0xffff94895ed7e2b0 | file object: 0xffff94895ed7e330 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7e440 | file object: 0xffff94895ed7e4c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7e5d0 | file object: 0xffff94895ed7e650 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.jfm pool: 0xffff94895ed7e760 | file object: 0xffff94895ed7e7e0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini pool: 0xffff94895ed7e8f0 | file object: 0xffff94895ed7e970 | offsetby: 0x80 \$Directory pool: 0xffff94895ed7ea80 | file object: 0xffff94895ed7eb00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7ec10 | file object: 0xffff94895ed7ec90 | offsetby: 0x80 \Windows\SysWOW64\DWrite.dll pool: 0xffff94895ed7eda0 | file object: 0xffff94895ed7ee20 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Visual Studio Code.lnk pool: 0xffff94895ed7f0c0 | file object: 0xffff94895ed7f140 | offsetby: 0x80 \Windows\System32\Windows.UI.Shell.dll pool: 0xffff94895ed7f250 | file object: 0xffff94895ed7f2d0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe pool: 0xffff94895ed7f3e0 | file object: 0xffff94895ed7f460 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk pool: 0xffff94895ed7f570 | file object: 0xffff94895ed7f5f0 | offsetby: 0x80 \Windows\System32\ActivationClient.dll pool: 0xffff94895ed7f700 | file object: 0xffff94895ed7f780 | offsetby: 0x80 \Windows\System32\en-US\winnlsres.dll.mui pool: 0xffff94895ed7f890 | file object: 0xffff94895ed7f910 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed7fa20 | file object: 0xffff94895ed7faa0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed7fbb0 | file object: 0xffff94895ed7fc30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed7fd40 | file object: 0xffff94895ed7fdc0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed80060 | file object: 0xffff94895ed800e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed801f0 | file object: 0xffff94895ed80270 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed80380 | file object: 0xffff94895ed80400 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ed80510 | file object: 0xffff94895ed80590 | offsetby: 0x80 \Windows\System32\Windows.WARP.JITService.dll pool: 0xffff94895ed806a0 | file object: 0xffff94895ed80720 | offsetby: 0x80 \Windows\SystemResources\stobject.dll.mun pool: 0xffff94895ed80830 | file object: 0xffff94895ed808b0 | offsetby: 0x80 \$Directory pool: 0xffff94895ed809c0 | file object: 0xffff94895ed80a40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed80b50 | file object: 0xffff94895ed80bd0 | offsetby: 0x80 \Windows\System32\atlthunk.dll pool: 0xffff94895ed80ce0 | file object: 0xffff94895ed80d60 | offsetby: 0x80 \Windows\System32\en-US\stobject.dll.mui pool: 0xffff94895ed80e70 | file object: 0xffff94895ed80ef0 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Msix.PackagingTool.Driver~~1.0.mum pool: 0xffff94895ed81000 | file object: 0xffff94895ed81080 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ed81190 | file object: 0xffff94895ed81210 | offsetby: 0x80 \Windows\System32\stobject.dll pool: 0xffff94895ed81320 | file object: 0xffff94895ed813a0 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommonInetCore\pris\Windows.UI.ShellCommonInetCore.en-US.pri pool: 0xffff94895ed814b0 | file object: 0xffff94895ed81530 | offsetby: 0x80 \$Directory pool: 0xffff94895ed81640 | file object: 0xffff94895ed816c0 | offsetby: 0x80 \Windows\System32\en-US\InputSwitch.dll.mui pool: 0xffff94895ed817d0 | file object: 0xffff94895ed81850 | offsetby: 0x80 \Windows\System32\en-US\batmeter.dll.mui pool: 0xffff94895ed81960 | file object: 0xffff94895ed819e0 | offsetby: 0x80 \Windows\SysWOW64\OneCoreCommonProxyStub.dll pool: 0xffff94895ed81af0 | file object: 0xffff94895ed81b70 | offsetby: 0x80 \Windows\Prefetch\MICROSOFTEDGESH.EXE-CFCB7D2B.pf pool: 0xffff94895ed81c80 | file object: 0xffff94895ed81d00 | offsetby: 0x80 \Windows\System32\Geolocation.dll pool: 0xffff94895ed81e10 | file object: 0xffff94895ed81e90 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfiguration\BingConfiguration_common.xml pool: 0xffff94895ed82130 | file object: 0xffff94895ed821b0 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895ed822c0 | file object: 0xffff94895ed82340 | offsetby: 0x80 \Windows\SysWOW64\d3d10warp.dll pool: 0xffff94895ed82450 | file object: 0xffff94895ed824d0 | offsetby: 0x80 \Windows\SysWOW64\UIAutomationCore.dll pool: 0xffff94895ed825e0 | file object: 0xffff94895ed82660 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfiguration\BingConfiguration_en-US.xml pool: 0xffff94895ed82770 | file object: 0xffff94895ed827f0 | offsetby: 0x80 \Windows\System32\en-US\sndvolsso.dll.mui pool: 0xffff94895ed82900 | file object: 0xffff94895ed82980 | offsetby: 0x80 \$Directory pool: 0xffff94895ed82a90 | file object: 0xffff94895ed82b10 | offsetby: 0x80 \Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll pool: 0xffff94895ed82c20 | file object: 0xffff94895ed82ca0 | offsetby: 0x80 \Windows\SystemResources\SndVolSSO.dll.mun pool: 0xffff94895ed82db0 | file object: 0xffff94895ed82e30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f043160 | file object: 0xffff94895f0431e0 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895f0432f0 | file object: 0xffff94895f043370 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat pool: 0xffff94895f043480 | file object: 0xffff94895f043500 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy pool: 0xffff94895f043610 | file object: 0xffff94895f043690 | offsetby: 0x80 \Windows\System32\icu.dll pool: 0xffff94895f0437a0 | file object: 0xffff94895f043820 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll pool: 0xffff94895f043930 | file object: 0xffff94895f0439b0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe pool: 0xffff94895f043ac0 | file object: 0xffff94895f043b40 | offsetby: 0x80 \Windows\System32\icuuc.dll pool: 0xffff94895f043c50 | file object: 0xffff94895f043cd0 | offsetby: 0x80 \Windows\System32\icuin.dll pool: 0xffff94895f043de0 | file object: 0xffff94895f043e60 | offsetby: 0x80 \Windows\System32\msimtf.dll pool: 0xffff94895f044100 | file object: 0xffff94895f044180 | offsetby: 0x80 \Windows\System32\SpeechPal.dll pool: 0xffff94895f044290 | file object: 0xffff94895f044310 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f044420 | file object: 0xffff94895f0444a0 | offsetby: 0x80 \Windows\System32\EdgeManager.dll pool: 0xffff94895f0445b0 | file object: 0xffff94895f044630 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfigurationClient.dll pool: 0xffff94895f044740 | file object: 0xffff94895f0447c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 pool: 0xffff94895f0448d0 | file object: 0xffff94895f044950 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG2 pool: 0xffff94895f044a60 | file object: 0xffff94895f044ae0 | offsetby: 0x80 \Windows\System32\Chakra.dll pool: 0xffff94895f044bf0 | file object: 0xffff94895f044c70 | offsetby: 0x80 \Windows\System32\ActionMgr.dll pool: 0xffff94895f044d80 | file object: 0xffff94895f044e00 | offsetby: 0x80 \Windows\System32\Windows.Cortana.ProxyStub.dll pool: 0xffff94895f0450a0 | file object: 0xffff94895f045120 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f045230 | file object: 0xffff94895f0452b0 | offsetby: 0x80 \Windows\System32\edgehtml.dll pool: 0xffff94895f0453c0 | file object: 0xffff94895f045440 | offsetby: 0x80 \Windows\System32\srpapi.dll pool: 0xffff94895f045550 | file object: 0xffff94895f0455d0 | offsetby: 0x80 \Windows\System32\edgeIso.dll pool: 0xffff94895f0456e0 | file object: 0xffff94895f045760 | offsetby: 0x80 \Windows\System32\rometadata.dll pool: 0xffff94895f045870 | file object: 0xffff94895f0458f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f045a00 | file object: 0xffff94895f045a80 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat pool: 0xffff94895f045b90 | file object: 0xffff94895f045c10 | offsetby: 0x80 \Windows\System32\Windows.Cortana.PAL.Desktop.dll pool: 0xffff94895f045d20 | file object: 0xffff94895f045da0 | offsetby: 0x80 \Windows\System32\UIAutomationCore.dll pool: 0xffff94895f046040 | file object: 0xffff94895f0460c0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll pool: 0xffff94895f0461d0 | file object: 0xffff94895f046250 | offsetby: 0x80 \Windows\System32\msftedit.dll pool: 0xffff94895f046360 | file object: 0xffff94895f0463e0 | offsetby: 0x80 \Windows\rescache\_merged\3616815529\1561332472.pri pool: 0xffff94895f0464f0 | file object: 0xffff94895f046570 | offsetby: 0x80 \$Directory pool: 0xffff94895f046680 | file object: 0xffff94895f046700 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 pool: 0xffff94895f046810 | file object: 0xffff94895f046890 | offsetby: 0x80 \$Directory pool: 0xffff94895f0469a0 | file object: 0xffff94895f046a20 | offsetby: 0x80 \Windows\System32\Speech_OneCore\common\sapi_onecore.dll pool: 0xffff94895f046b30 | file object: 0xffff94895f046bb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f046cc0 | file object: 0xffff94895f046d40 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm pool: 0xffff94895f046e50 | file object: 0xffff94895f046ed0 | offsetby: 0x80 \Windows\System32\RTMediaFrame.dll pool: 0xffff94895f047170 | file object: 0xffff94895f0471f0 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895f047300 | file object: 0xffff94895f047380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f047490 | file object: 0xffff94895f047510 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\AZDRN8BV\www.bing[1].xml pool: 0xffff94895f047620 | file object: 0xffff94895f0476a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Blend.exe pool: 0xffff94895f0477b0 | file object: 0xffff94895f047830 | offsetby: 0x80 \Windows\System32\PersonaX.dll pool: 0xffff94895f047940 | file object: 0xffff94895f0479c0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019\Visual Studio Tools\VC\x64_x86 Cross Tools Command Prompt for VS 2019.lnk pool: 0xffff94895f047ad0 | file object: 0xffff94895f047b50 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\pris\resources.en-US.pri pool: 0xffff94895f047c60 | file object: 0xffff94895f047ce0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f047df0 | file object: 0xffff94895f047e70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f048110 | file object: 0xffff94895f048190 | offsetby: 0x80 \Windows\System32\ConstraintIndex.Search.dll pool: 0xffff94895f0482a0 | file object: 0xffff94895f048320 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2019.lnk pool: 0xffff94895f048430 | file object: 0xffff94895f0484b0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\resources.pri pool: 0xffff94895f0485c0 | file object: 0xffff94895f048640 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1 pool: 0xffff94895f048750 | file object: 0xffff94895f0487d0 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f0488e0 | file object: 0xffff94895f048960 | offsetby: 0x80 \Windows\System32\en-US\cmd.exe.mui pool: 0xffff94895f048a70 | file object: 0xffff94895f048af0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 pool: 0xffff94895f048c00 | file object: 0xffff94895f048c80 | offsetby: 0x80 \Windows\System32\cmd.exe pool: 0xffff94895f048d90 | file object: 0xffff94895f048e10 | offsetby: 0x80 \Windows\System32\localspl.dll pool: 0xffff94895f0490b0 | file object: 0xffff94895f049130 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2 pool: 0xffff94895f049240 | file object: 0xffff94895f0492c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0493d0 | file object: 0xffff94895f049450 | offsetby: 0x80 \Windows\System32\Windows.Web.Http.dll pool: 0xffff94895f049560 | file object: 0xffff94895f0495e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0496f0 | file object: 0xffff94895f049770 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\TempState\Traces\CortanaTrace1.etl pool: 0xffff94895f049880 | file object: 0xffff94895f049900 | offsetby: 0x80 \Windows\System32\PrintIsolationProxy.dll pool: 0xffff94895f049a10 | file object: 0xffff94895f049a90 | offsetby: 0x80 \Windows\System32\en-US\localspl.dll.mui pool: 0xffff94895f049ba0 | file object: 0xffff94895f049c20 | offsetby: 0x80 \$Directory pool: 0xffff94895f049d30 | file object: 0xffff94895f049db0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{b8d50ec8-4156-4a36-83d7-a4e1d31864fb}\Settings.ft pool: 0xffff94895f04a050 | file object: 0xffff94895f04a0d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{b8d50ec8-4156-4a36-83d7-a4e1d31864fb}\Settings.index pool: 0xffff94895f04a1e0 | file object: 0xffff94895f04a260 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\apps.csg pool: 0xffff94895f04a370 | file object: 0xffff94895f04a3f0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll pool: 0xffff94895f04a500 | file object: 0xffff94895f04a580 | offsetby: 0x80 \Windows\System32\Windows.UI.Input.Inking.dll pool: 0xffff94895f04a690 | file object: 0xffff94895f04a710 | offsetby: 0x80 \$Directory pool: 0xffff94895f04a820 | file object: 0xffff94895f04a8a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f04a9b0 | file object: 0xffff94895f04aa30 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.ApplicationModel.winmd pool: 0xffff94895f04ab40 | file object: 0xffff94895f04abc0 | offsetby: 0x80 \Windows\System32\SpeechPal.dll pool: 0xffff94895f04acd0 | file object: 0xffff94895f04ad50 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt pool: 0xffff94895f04ae60 | file object: 0xffff94895f04aee0 | offsetby: 0x80 \Windows\System32\msftedit.dll pool: 0xffff94895f04b180 | file object: 0xffff94895f04b200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04b310 | file object: 0xffff94895f04b390 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll pool: 0xffff94895f04b4a0 | file object: 0xffff94895f04b520 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f04b630 | file object: 0xffff94895f04b6b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f04b7c0 | file object: 0xffff94895f04b840 | offsetby: 0x80 \Windows\System32\UserDataTypeHelperUtil.dll pool: 0xffff94895f04b950 | file object: 0xffff94895f04b9d0 | offsetby: 0x80 \$Directory pool: 0xffff94895f04bae0 | file object: 0xffff94895f04bb60 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\GameDVR\KnownGameList.bin pool: 0xffff94895f04bc70 | file object: 0xffff94895f04bcf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Blend.exe.config pool: 0xffff94895f04be00 | file object: 0xffff94895f04be80 | offsetby: 0x80 \Windows\System32\spoolss.dll pool: 0xffff94895f04c120 | file object: 0xffff94895f04c1a0 | offsetby: 0x80 \Windows\System32\sfc_os.dll pool: 0xffff94895f04c2b0 | file object: 0xffff94895f04c330 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres pool: 0xffff94895f04c440 | file object: 0xffff94895f04c4c0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\settings.csg pool: 0xffff94895f04c5d0 | file object: 0xffff94895f04c650 | offsetby: 0x80 \Windows\System32\mfplat.dll pool: 0xffff94895f04c760 | file object: 0xffff94895f04c7e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Safety\shell\remote\script pool: 0xffff94895f04c8f0 | file object: 0xffff94895f04c970 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f04ca80 | file object: 0xffff94895f04cb00 | offsetby: 0x80 \$Directory pool: 0xffff94895f04cc10 | file object: 0xffff94895f04cc90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04cda0 | file object: 0xffff94895f04ce20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04d0c0 | file object: 0xffff94895f04d140 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\93d3c66b647268c606511d307aafc707db3eb440\4e70b3a35af8fb80e84e478c823f9b3819340aa1e4b50670066a9c070015cccd pool: 0xffff94895f04d250 | file object: 0xffff94895f04d2d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04d3e0 | file object: 0xffff94895f04d460 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04d570 | file object: 0xffff94895f04d5f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04d700 | file object: 0xffff94895f04d780 | offsetby: 0x80 \Windows\System32\AppMon.dll pool: 0xffff94895f04d890 | file object: 0xffff94895f04d910 | offsetby: 0x80 嚑 pool: 0xffff94895f04da20 | file object: 0xffff94895f04daa0 | offsetby: 0x80 \Windows\CSC\v2.0.6\namespace pool: 0xffff94895f04dbb0 | file object: 0xffff94895f04dc30 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalCache\perUserCache_0\index pool: 0xffff94895f04dd40 | file object: 0xffff94895f04ddc0 | offsetby: 0x80 \Windows\System32\en-US\smartscreen.exe.mui pool: 0xffff94895f04e060 | file object: 0xffff94895f04e0e0 | offsetby: 0x80 \Windows\System32\en-US\wlrmdr.exe.mui pool: 0xffff94895f04e1f0 | file object: 0xffff94895f04e270 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb pool: 0xffff94895f04e380 | file object: 0xffff94895f04e400 | offsetby: 0x80 \Windows\SysWOW64\wbem\wmiutils.dll pool: 0xffff94895f04e510 | file object: 0xffff94895f04e590 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\setup\logs\Downloader_2020-06-04_062122_3812-3832.log pool: 0xffff94895f04e6a0 | file object: 0xffff94895f04e720 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04e830 | file object: 0xffff94895f04e8b0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f04e9c0 | file object: 0xffff94895f04ea40 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres pool: 0xffff94895f04eb50 | file object: 0xffff94895f04ebd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04ece0 | file object: 0xffff94895f04ed60 | offsetby: 0x80 \$Directory pool: 0xffff94895f04ee70 | file object: 0xffff94895f04eef0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\93d3c66b647268c606511d307aafc707db3eb440\93d3c66b647268c606511d307aafc707db3eb440.pieceshash pool: 0xffff94895f04f000 | file object: 0xffff94895f04f080 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04f190 | file object: 0xffff94895f04f210 | offsetby: 0x80 sm pool: 0xffff94895f04f320 | file object: 0xffff94895f04f3a0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll pool: 0xffff94895f04f4b0 | file object: 0xffff94895f04f530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04f640 | file object: 0xffff94895f04f6c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f04f7d0 | file object: 0xffff94895f04f850 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.Workspaces.dll pool: 0xffff94895f04f960 | file object: 0xffff94895f04f9e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe pool: 0xffff94895f04faf0 | file object: 0xffff94895f04fb70 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Widgets.dll pool: 0xffff94895f04fc80 | file object: 0xffff94895f04fd00 | offsetby: 0x80 \Windows\SysWOW64\iertutil.dll pool: 0xffff94895f04fe10 | file object: 0xffff94895f04fe90 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\platforms\qwindows.dll pool: 0xffff94895f050130 | file object: 0xffff94895f0501b0 | offsetby: 0x80 \Windows\System32\en-US\Windows.Web.Http.dll.mui pool: 0xffff94895f0502c0 | file object: 0xffff94895f050340 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol pool: 0xffff94895f050450 | file object: 0xffff94895f0504d0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f0505e0 | file object: 0xffff94895f050660 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.18362.752_none_360a2fa7e425ce19.manifest pool: 0xffff94895f050770 | file object: 0xffff94895f0507f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f050900 | file object: 0xffff94895f050980 | offsetby: 0x80 \Windows\System32\UserDataTimeUtil.dll pool: 0xffff94895f050a90 | file object: 0xffff94895f050b10 | offsetby: 0x80 \Windows\SoftwareDistribution\DataStore\Logs\edb00046.l pool: 0xffff94895f050c20 | file object: 0xffff94895f050ca0 | offsetby: 0x80 \$Directory pool: 0xffff94895f050db0 | file object: 0xffff94895f050e30 | offsetby: 0x80 \Windows\System32\appraiser.dll pool: 0xffff94895f0510d0 | file object: 0xffff94895f051150 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\VisualStudio\16.0_0f5aa209\1033\CmdUI.PRF pool: 0xffff94895f051260 | file object: 0xffff94895f0512e0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\UserProfileRoaming\Latest.dat pool: 0xffff94895f0513f0 | file object: 0xffff94895f051470 | offsetby: 0x80 \Windows\System32\DeviceUpdateCenterCsp.dll pool: 0xffff94895f051580 | file object: 0xffff94895f051600 | offsetby: 0x80 \$Directory pool: 0xffff94895f051710 | file object: 0xffff94895f051790 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\8d60a20bcb7b36d0ddf74b96d554c96e\mscorlib.ni.dll.aux pool: 0xffff94895f0518a0 | file object: 0xffff94895f051920 | offsetby: 0x80 \$Directory pool: 0xffff94895f051a30 | file object: 0xffff94895f051ab0 | offsetby: 0x80 \Windows pool: 0xffff94895f051bc0 | file object: 0xffff94895f051c40 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Vault\UserProfileRoaming\Latest.dat pool: 0xffff94895f051d50 | file object: 0xffff94895f051dd0 | offsetby: 0x80 ₀廆钉￿ pool: 0xffff94895f052070 | file object: 0xffff94895f0520f0 | offsetby: 0x80 \Windows\System32\WinRtTracing.dll pool: 0xffff94895f052200 | file object: 0xffff94895f052280 | offsetby: 0x80 \$Directory pool: 0xffff94895f052390 | file object: 0xffff94895f052410 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f052520 | file object: 0xffff94895f0525a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0526b0 | file object: 0xffff94895f052730 | offsetby: 0x80 \$Directory pool: 0xffff94895f052840 | file object: 0xffff94895f0528c0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\1D4350A3-330D-4AF9-B3FF-A927A45998AC.vsch pool: 0xffff94895f0529d0 | file object: 0xffff94895f052a50 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe pool: 0xffff94895f052b60 | file object: 0xffff94895f052be0 | offsetby: 0x80 \$Directory pool: 0xffff94895f052cf0 | file object: 0xffff94895f052d70 | offsetby: 0x80 \Windows\System32\SearchIndexer.exe pool: 0xffff94895f053010 | file object: 0xffff94895f053090 | offsetby: 0x80 \Windows\SysWOW64\winmm.dll pool: 0xffff94895f0531a0 | file object: 0xffff94895f053220 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe pool: 0xffff94895f053330 | file object: 0xffff94895f0533b0 | offsetby: 0x80 \Windows\SysWOW64\dnsapi.dll pool: 0xffff94895f0534c0 | file object: 0xffff94895f053540 | offsetby: 0x80 \Windows\SysWOW64\dbgcore.dll pool: 0xffff94895f053650 | file object: 0xffff94895f0536d0 | offsetby: 0x80 \Windows\SysWOW64\wscapi.dll pool: 0xffff94895f0537e0 | file object: 0xffff94895f053860 | offsetby: 0x80 \Windows\System32\aeevts.dll pool: 0xffff94895f053970 | file object: 0xffff94895f0539f0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx pool: 0xffff94895f053b00 | file object: 0xffff94895f053b80 | offsetby: 0x80 \Windows\SysWOW64\winmmbase.dll pool: 0xffff94895f053c90 | file object: 0xffff94895f053d10 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 pool: 0xffff94895f053e20 | file object: 0xffff94895f053ea0 | offsetby: 0x80 \Windows\SysWOW64\dbghelp.dll pool: 0xffff94895f054140 | file object: 0xffff94895f0541c0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ssleay32.dll pool: 0xffff94895f0542d0 | file object: 0xffff94895f054350 | offsetby: 0x80 \Windows\SysWOW64\cldapi.dll pool: 0xffff94895f054460 | file object: 0xffff94895f0544e0 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 pool: 0xffff94895f0545f0 | file object: 0xffff94895f054670 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\libeay32.dll pool: 0xffff94895f054780 | file object: 0xffff94895f054800 | offsetby: 0x80 \Windows\SysWOW64\srvcli.dll pool: 0xffff94895f054910 | file object: 0xffff94895f054990 | offsetby: 0x80 \Program Files\Windows Defender\MpClient.dll pool: 0xffff94895f054aa0 | file object: 0xffff94895f054b20 | offsetby: 0x80 \Windows\SysWOW64\fltLib.dll pool: 0xffff94895f054c30 | file object: 0xffff94895f054cb0 | offsetby: 0x80 \Windows\SysWOW64\ntasn1.dll pool: 0xffff94895f054dc0 | file object: 0xffff94895f054e40 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f0550e0 | file object: 0xffff94895f055160 | offsetby: 0x80 \Windows\SysWOW64\netapi32.dll pool: 0xffff94895f055270 | file object: 0xffff94895f0552f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f055400 | file object: 0xffff94895f055480 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MsMpLics.dll pool: 0xffff94895f055590 | file object: 0xffff94895f055610 | offsetby: 0x80 \Windows\SysWOW64\mswsock.dll pool: 0xffff94895f055720 | file object: 0xffff94895f0557a0 | offsetby: 0x80 \Windows\SysWOW64\netutils.dll pool: 0xffff94895f0558b0 | file object: 0xffff94895f055930 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ActivationStore.dat pool: 0xffff94895f055a40 | file object: 0xffff94895f055ac0 | offsetby: 0x80 \Windows\SysWOW64\mpr.dll pool: 0xffff94895f055bd0 | file object: 0xffff94895f055c50 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-497F06BA.pf pool: 0xffff94895f055d60 | file object: 0xffff94895f055de0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe\KnownGameList.bin pool: 0xffff94895f056080 | file object: 0xffff94895f056100 | offsetby: 0x80 \Windows\System32\en-US\SearchIndexer.exe.mui pool: 0xffff94895f056210 | file object: 0xffff94895f056290 | offsetby: 0x80 \Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf pool: 0xffff94895f0563a0 | file object: 0xffff94895f056420 | offsetby: 0x80 \Windows\System32\en-US\edgehtml.dll.mui pool: 0xffff94895f056530 | file object: 0xffff94895f0565b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0566c0 | file object: 0xffff94895f056740 | offsetby: 0x80 \Windows\System32\msimtf.dll pool: 0xffff94895f056850 | file object: 0xffff94895f0568d0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f0569e0 | file object: 0xffff94895f056a60 | offsetby: 0x80 \$Directory pool: 0xffff94895f056b70 | file object: 0xffff94895f056bf0 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx pool: 0xffff94895f056d00 | file object: 0xffff94895f056d80 | offsetby: 0x80 \$Directory pool: 0xffff94895f057020 | file object: 0xffff94895f0570a0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8b6bf2141e0366fccda0fa011d31144baffa2cad\f9ae68858dc926ca2fa30929835e1ff4a781d9c1b7d0c2fbcf04a06289631e43 pool: 0xffff94895f0571b0 | file object: 0xffff94895f057230 | offsetby: 0x80 \$Directory pool: 0xffff94895f057340 | file object: 0xffff94895f0573c0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f0574d0 | file object: 0xffff94895f057550 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8b6bf2141e0366fccda0fa011d31144baffa2cad\8b6bf2141e0366fccda0fa011d31144baffa2cad.pieceshash pool: 0xffff94895f057660 | file object: 0xffff94895f0576e0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\Init[1].htm pool: 0xffff94895f0577f0 | file object: 0xffff94895f057870 | offsetby: 0x80 \Windows\System32\CapabilityAccessManagerClient.dll pool: 0xffff94895f057980 | file object: 0xffff94895f057a00 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895f057b10 | file object: 0xffff94895f057b90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f057ca0 | file object: 0xffff94895f057d20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f057e30 | file object: 0xffff94895f057eb0 | offsetby: 0x80 \Windows\System32\SearchIndexer.exe pool: 0xffff94895f058150 | file object: 0xffff94895f0581d0 | offsetby: 0x80 \Windows\System32\en-US\SearchIndexer.exe.mui pool: 0xffff94895f0582e0 | file object: 0xffff94895f058360 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895f058470 | file object: 0xffff94895f0584f0 | offsetby: 0x80 \Windows\System32\edgeIso.dll pool: 0xffff94895f058600 | file object: 0xffff94895f058680 | offsetby: 0x80 \$Directory pool: 0xffff94895f058790 | file object: 0xffff94895f058810 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f058920 | file object: 0xffff94895f0589a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f058ab0 | file object: 0xffff94895f058b30 | offsetby: 0x80 \Windows\System32\Windows.Cortana.OneCore.dll pool: 0xffff94895f058c40 | file object: 0xffff94895f058cc0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\BBDBvk5AokRBwrox4FNOb3dTd1E[1].css pool: 0xffff94895f058dd0 | file object: 0xffff94895f058e50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0590f0 | file object: 0xffff94895f059170 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\KrMCCFSW8lpH72h04MfXP1r7Iwg.br[1].js pool: 0xffff94895f059280 | file object: 0xffff94895f059300 | offsetby: 0x80 \Windows\System32\Windows.Cortana.ProxyStub.dll pool: 0xffff94895f059410 | file object: 0xffff94895f059490 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Search.winmd pool: 0xffff94895f0595a0 | file object: 0xffff94895f059620 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f059730 | file object: 0xffff94895f0597b0 | offsetby: 0x80 \Windows\System32\sru\SRU00082.l pool: 0xffff94895f0598c0 | file object: 0xffff94895f059940 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\VD_yvlUb0tvp8Jzm6M5kckrk-G4[1].js pool: 0xffff94895f059a50 | file object: 0xffff94895f059ad0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\YUZzL_Z2JA2fx-HeecWdeAth214.br[1].js pool: 0xffff94895f059be0 | file object: 0xffff94895f059c60 | offsetby: 0x80 \Windows\SysWOW64\atlthunk.dll pool: 0xffff94895f059d70 | file object: 0xffff94895f059df0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\2sxc17BhrWq7uny6sVsav94vDrk[1].js pool: 0xffff94895f05a090 | file object: 0xffff94895f05a110 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.52.3001.0_x64__8wekyb3d8bbwe\KnownGameListRS3.bin pool: 0xffff94895f05a220 | file object: 0xffff94895f05a2a0 | offsetby: 0x80 \Windows\SysWOW64\mlang.dll pool: 0xffff94895f05a3b0 | file object: 0xffff94895f05a430 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\9sbvPkhkwbQemj6O7Nka01E6ITI.br[1].js pool: 0xffff94895f05a540 | file object: 0xffff94895f05a5c0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\BkCFSCgkW-Wh02pJlYudqkJYDas[1].js pool: 0xffff94895f05a6d0 | file object: 0xffff94895f05a750 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache pool: 0xffff94895f05a860 | file object: 0xffff94895f05a8e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f05a9f0 | file object: 0xffff94895f05aa70 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\GameDVR pool: 0xffff94895f05ab80 | file object: 0xffff94895f05ac00 | offsetby: 0x80 \Windows\bcastdvr pool: 0xffff94895f05ad10 | file object: 0xffff94895f05ad90 | offsetby: 0x80 \Windows\bcastdvr\KnownGameList.bin pool: 0xffff94895f05b030 | file object: 0xffff94895f05b0b0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895f05b1c0 | file object: 0xffff94895f05b240 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe pool: 0xffff94895f05b350 | file object: 0xffff94895f05b3d0 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895f05b4e0 | file object: 0xffff94895f05b560 | offsetby: 0x80 \Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll pool: 0xffff94895f05b670 | file object: 0xffff94895f05b6f0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jtx pool: 0xffff94895f05b800 | file object: 0xffff94895f05b880 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895f05b990 | file object: 0xffff94895f05ba10 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.Foundation.winmd pool: 0xffff94895f05bb20 | file object: 0xffff94895f05bba0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\_ae0cB8fPDMkfSJUO5xUuczSt7E[1].css pool: 0xffff94895f05bcb0 | file object: 0xffff94895f05bd30 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Internal.Search.winmd pool: 0xffff94895f05be40 | file object: 0xffff94895f05bec0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\rWodfSOe6oykZ3rDrp6kEsYBoUY.br[1].js pool: 0xffff94895f05c160 | file object: 0xffff94895f05c1e0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.jfm pool: 0xffff94895f05c2f0 | file object: 0xffff94895f05c370 | offsetby: 0x80 \Windows\System32\mssprxy.dll pool: 0xffff94895f05c480 | file object: 0xffff94895f05c500 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\i_YZcGgrGDS11TLJss9m0werwmQ[1].js pool: 0xffff94895f05c610 | file object: 0xffff94895f05c690 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_44.18362.449.0_neutral__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895f05c7a0 | file object: 0xffff94895f05c820 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.UI.winmd pool: 0xffff94895f05c930 | file object: 0xffff94895f05c9b0 | offsetby: 0x80 \Windows\System32\rundll32.exe pool: 0xffff94895f05cac0 | file object: 0xffff94895f05cb40 | offsetby: 0x80 \Windows\Prefetch\MICROSOFTEDGE.EXE-4239ED94.pf pool: 0xffff94895f05cc50 | file object: 0xffff94895f05ccd0 | offsetby: 0x80 \$Directory pool: 0xffff94895f05cde0 | file object: 0xffff94895f05ce60 | offsetby: 0x80 \Windows\System32\prnfldr.dll pool: 0xffff94895f05d100 | file object: 0xffff94895f05d180 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 pool: 0xffff94895f05d290 | file object: 0xffff94895f05d310 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\AZDRN8BV pool: 0xffff94895f05d420 | file object: 0xffff94895f05d4a0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\wutQTnZB8DSAVx0Uyj2lGLBomhU.br[1].js pool: 0xffff94895f05d5b0 | file object: 0xffff94895f05d630 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jtx pool: 0xffff94895f05d740 | file object: 0xffff94895f05d7c0 | offsetby: 0x80 \Windows\SysWOW64\AppXDeploymentClient.dll pool: 0xffff94895f05d8d0 | file object: 0xffff94895f05d950 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 pool: 0xffff94895f05da60 | file object: 0xffff94895f05dae0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\tdtrFofSv8OyknEkD6yLgNTVtoI[1].js pool: 0xffff94895f05dbf0 | file object: 0xffff94895f05dc70 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_C9FB72B5AE80778A08024D8B0FDECC6F pool: 0xffff94895f05dd80 | file object: 0xffff94895f05de00 | offsetby: 0x80 \Windows\SystemResources\Chakra.dll.mun pool: 0xffff94895f05e0a0 | file object: 0xffff94895f05e120 | offsetby: 0x80 \$Directory pool: 0xffff94895f05e230 | file object: 0xffff94895f05e2b0 | offsetby: 0x80 \Windows\SystemResources\tquery.dll.mun pool: 0xffff94895f05e3c0 | file object: 0xffff94895f05e440 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll pool: 0xffff94895f05e550 | file object: 0xffff94895f05e5d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 pool: 0xffff94895f05e6e0 | file object: 0xffff94895f05e760 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\lyn02bUVdkxg2w6l5Bh4OP8JOHY[1].js pool: 0xffff94895f05e870 | file object: 0xffff94895f05e8f0 | offsetby: 0x80 \Windows\System32\NetworkUXBroker.dll pool: 0xffff94895f05ea00 | file object: 0xffff94895f05ea80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f05eb90 | file object: 0xffff94895f05ec10 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll pool: 0xffff94895f05ed20 | file object: 0xffff94895f05eda0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\dhJQjqX1fnpl5EFkYDpBSnHfyIc.br[1].js pool: 0xffff94895f05f040 | file object: 0xffff94895f05f0c0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\AppCache\OYXS3CPL\17\GwhBA0TIhG5qv_YqoSVf3jbzOwY[1].js pool: 0xffff94895f05f1d0 | file object: 0xffff94895f05f250 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jcp pool: 0xffff94895f05f360 | file object: 0xffff94895f05f3e0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\BE8B021F9E811DFC8C8A28572A17C05A_121FBDD5FFBF03460F5DFF73AC8B317B pool: 0xffff94895f05f4f0 | file object: 0xffff94895f05f570 | offsetby: 0x80 \Windows\System32\ApplicationFrameHost.exe pool: 0xffff94895f05f680 | file object: 0xffff94895f05f700 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619 pool: 0xffff94895f05f810 | file object: 0xffff94895f05f890 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f05f9a0 | file object: 0xffff94895f05fa20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f05fb30 | file object: 0xffff94895f05fbb0 | offsetby: 0x80 \Windows\SysWOW64\FirewallAPI.dll pool: 0xffff94895f05fcc0 | file object: 0xffff94895f05fd40 | offsetby: 0x80 \Windows\System32\notepad.exe pool: 0xffff94895f05fe50 | file object: 0xffff94895f05fed0 | offsetby: 0x80 \Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-CCEEF759.pf pool: 0xffff94895f060170 | file object: 0xffff94895f0601f0 | offsetby: 0x80 \Windows\System32\en-US\notepad.exe.mui pool: 0xffff94895f060300 | file object: 0xffff94895f060380 | offsetby: 0x80 \System Volume Information\IndexerVolumeGuid pool: 0xffff94895f060490 | file object: 0xffff94895f060510 | offsetby: 0x80 \Windows\SysWOW64\StateRepository.Core.dll pool: 0xffff94895f060620 | file object: 0xffff94895f0606a0 | offsetby: 0x80 \Windows\SysWOW64\fwbase.dll pool: 0xffff94895f0607b0 | file object: 0xffff94895f060830 | offsetby: 0x80 \Windows\System32\SystemSettings.DataModel.dll pool: 0xffff94895f060940 | file object: 0xffff94895f0609c0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe pool: 0xffff94895f060ad0 | file object: 0xffff94895f060b50 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f060c60 | file object: 0xffff94895f060ce0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f060df0 | file object: 0xffff94895f060e70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f061110 | file object: 0xffff94895f061190 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb000B0.jtx pool: 0xffff94895f0612a0 | file object: 0xffff94895f061320 | offsetby: 0x80 \Windows\System32\SearchFilterHost.exe pool: 0xffff94895f061430 | file object: 0xffff94895f0614b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\CortanaAssist\AllowList.dat pool: 0xffff94895f0615c0 | file object: 0xffff94895f061640 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb000B1.jtx pool: 0xffff94895f061750 | file object: 0xffff94895f0617d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0618e0 | file object: 0xffff94895f061960 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f061a70 | file object: 0xffff94895f061af0 | offsetby: 0x80 \$Directory pool: 0xffff94895f061c00 | file object: 0xffff94895f061c80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f061d90 | file object: 0xffff94895f061e10 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\56D028D820B809707DD543ADC5BA740A_DA817912A0FF50B7ECED96A7A0B8B1D1 pool: 0xffff94895f0620b0 | file object: 0xffff94895f062130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f062240 | file object: 0xffff94895f0622c0 | offsetby: 0x80 \Windows\System32\feclient.dll pool: 0xffff94895f0623d0 | file object: 0xffff94895f062450 | offsetby: 0x80 \Windows\System32\ApplicationFrameHost.exe pool: 0xffff94895f062560 | file object: 0xffff94895f0625e0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{0913F3ED-3CC5-413A-B33C-0C14AC3EDC9F}.dat pool: 0xffff94895f0626f0 | file object: 0xffff94895f062770 | offsetby: 0x80 \$Directory pool: 0xffff94895f062880 | file object: 0xffff94895f062900 | offsetby: 0x80 \Windows\System32\apisetschema.dll pool: 0xffff94895f062a10 | file object: 0xffff94895f062a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f062ba0 | file object: 0xffff94895f062c20 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eData.dll pool: 0xffff94895f062d30 | file object: 0xffff94895f062db0 | offsetby: 0x80 \Windows\System32\en-US\ESENT.dll.mui pool: 0xffff94895f063050 | file object: 0xffff94895f0630d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat pool: 0xffff94895f0631e0 | file object: 0xffff94895f063260 | offsetby: 0x80 \$Directory pool: 0xffff94895f063370 | file object: 0xffff94895f0633f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f063500 | file object: 0xffff94895f063580 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\bb572b74b79e4ae665d760c8d14e9eedb4f6b9c1\1fd859b1b07a5cdccc8eb815dce845ebedf83d3805d99e30273b0967b49cf1d3 pool: 0xffff94895f063690 | file object: 0xffff94895f063710 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f063820 | file object: 0xffff94895f0638a0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat.LOG1 pool: 0xffff94895f0639b0 | file object: 0xffff94895f063a30 | offsetby: 0x80 \Windows\System32\eShims.dll pool: 0xffff94895f063b40 | file object: 0xffff94895f063bc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f063cd0 | file object: 0xffff94895f063d50 | offsetby: 0x80 \$Directory pool: 0xffff94895f063e60 | file object: 0xffff94895f063ee0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat.LOG2 pool: 0xffff94895f064180 | file object: 0xffff94895f064200 | offsetby: 0x80 \$Directory pool: 0xffff94895f064310 | file object: 0xffff94895f064390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0644a0 | file object: 0xffff94895f064520 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f064630 | file object: 0xffff94895f0646b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0647c0 | file object: 0xffff94895f064840 | offsetby: 0x80 \$Directory pool: 0xffff94895f064950 | file object: 0xffff94895f0649d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f064ae0 | file object: 0xffff94895f064b60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f064c70 | file object: 0xffff94895f064cf0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe pool: 0xffff94895f064e00 | file object: 0xffff94895f064e80 | offsetby: 0x80 \Windows\SysWOW64\WinTypes.dll pool: 0xffff94895f065120 | file object: 0xffff94895f0651a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0652b0 | file object: 0xffff94895f065330 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f065440 | file object: 0xffff94895f0654c0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\bb572b74b79e4ae665d760c8d14e9eedb4f6b9c1\bb572b74b79e4ae665d760c8d14e9eedb4f6b9c1.pieceshash pool: 0xffff94895f0655d0 | file object: 0xffff94895f065650 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eModel.dll pool: 0xffff94895f065760 | file object: 0xffff94895f0657e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0658f0 | file object: 0xffff94895f065970 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f065a80 | file object: 0xffff94895f065b00 | offsetby: 0x80 \Windows\System32\en-US\ApplicationFrame.dll.mui pool: 0xffff94895f065c10 | file object: 0xffff94895f065c90 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eModel.dll pool: 0xffff94895f065da0 | file object: 0xffff94895f065e20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0660c0 | file object: 0xffff94895f066140 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb pool: 0xffff94895f066250 | file object: 0xffff94895f0662d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb pool: 0xffff94895f0663e0 | file object: 0xffff94895f066460 | offsetby: 0x80 \Windows\System32\browser_broker.exe pool: 0xffff94895f066570 | file object: 0xffff94895f0665f0 | offsetby: 0x80 \Windows\System32\browser_broker.exe pool: 0xffff94895f066700 | file object: 0xffff94895f066780 | offsetby: 0x80 \Windows\System32\en-US\user32.dll.mui pool: 0xffff94895f066890 | file object: 0xffff94895f066910 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\F12703B35B1F82C21160A92376087C84_C69A6F941E6EF88B8485DE94A86B7BCC pool: 0xffff94895f066a20 | file object: 0xffff94895f066aa0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f066bb0 | file object: 0xffff94895f066c30 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895f066d40 | file object: 0xffff94895f066dc0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\da53ab2cffb3ee4dcecda3d584ce2ff6c3ff69cc\da53ab2cffb3ee4dcecda3d584ce2ff6c3ff69cc.pieceshash pool: 0xffff94895f067060 | file object: 0xffff94895f0670e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0671f0 | file object: 0xffff94895f067270 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f067380 | file object: 0xffff94895f067400 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\edb000B2.jtx pool: 0xffff94895f067510 | file object: 0xffff94895f067590 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0676a0 | file object: 0xffff94895f067720 | offsetby: 0x80 \Windows\Prefetch\BROWSER_BROKER.EXE-E6357BB0.pf pool: 0xffff94895f067830 | file object: 0xffff94895f0678b0 | offsetby: 0x80 \Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll pool: 0xffff94895f0679c0 | file object: 0xffff94895f067a40 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\YourPhone.exe pool: 0xffff94895f067b50 | file object: 0xffff94895f067bd0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f067ce0 | file object: 0xffff94895f067d60 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895f067e70 | file object: 0xffff94895f067ef0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f068000 | file object: 0xffff94895f068080 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\Application.manifest pool: 0xffff94895f068190 | file object: 0xffff94895f068210 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f068320 | file object: 0xffff94895f0683a0 | offsetby: 0x80 \Windows\System32\aadWamExtension.dll pool: 0xffff94895f0684b0 | file object: 0xffff94895f068530 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.jfm pool: 0xffff94895f068640 | file object: 0xffff94895f0686c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0687d0 | file object: 0xffff94895f068850 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f068960 | file object: 0xffff94895f0689e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f068af0 | file object: 0xffff94895f068b70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f068c80 | file object: 0xffff94895f068d00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f068e10 | file object: 0xffff94895f068e90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe pool: 0xffff94895f069130 | file object: 0xffff94895f0691b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0692c0 | file object: 0xffff94895f069340 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f069450 | file object: 0xffff94895f0694d0 | offsetby: 0x80 \Windows\SysWOW64\msxml6.dll pool: 0xffff94895f0695e0 | file object: 0xffff94895f069660 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Protect\S-1-5-21-3234566417-3121902272-2793192418-1001\Preferred pool: 0xffff94895f069770 | file object: 0xffff94895f0697f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f069900 | file object: 0xffff94895f069980 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eData.dll pool: 0xffff94895f069a90 | file object: 0xffff94895f069b10 | offsetby: 0x80 \Windows\System32\en-US\ApplicationFrame.dll.mui pool: 0xffff94895f069c20 | file object: 0xffff94895f069ca0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f069db0 | file object: 0xffff94895f069e30 | offsetby: 0x80 \Windows\Prefetch\NISSRV.EXE-269386BD.pf pool: 0xffff94895f06a0d0 | file object: 0xffff94895f06a150 | offsetby: 0x80 \Windows\System32\Windows.Internal.SecurityMitigationsBroker.dll pool: 0xffff94895f06a260 | file object: 0xffff94895f06a2e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\ProTools\VSData_Package_Reg_VS.3643236F_FC70_11D3_A536_0090278A1BB8.pkgdef pool: 0xffff94895f06a3f0 | file object: 0xffff94895f06a470 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06a580 | file object: 0xffff94895f06a600 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06a710 | file object: 0xffff94895f06a790 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx pool: 0xffff94895f06a8a0 | file object: 0xffff94895f06a920 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll pool: 0xffff94895f06aa30 | file object: 0xffff94895f06aab0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgeSplashScreen.scale-100.png pool: 0xffff94895f06abc0 | file object: 0xffff94895f06ac40 | offsetby: 0x80 \$Directory pool: 0xffff94895f06ad50 | file object: 0xffff94895f06add0 | offsetby: 0x80 \Windows\System32\eShims.dll pool: 0xffff94895f06b070 | file object: 0xffff94895f06b0f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat pool: 0xffff94895f06b200 | file object: 0xffff94895f06b280 | offsetby: 0x80 \Windows\System32\browserbroker.dll pool: 0xffff94895f06b390 | file object: 0xffff94895f06b410 | offsetby: 0x80 \$Directory pool: 0xffff94895f06b520 | file object: 0xffff94895f06b5a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06b6b0 | file object: 0xffff94895f06b730 | offsetby: 0x80 \Windows\System32\Windows.WARP.JITService.dll pool: 0xffff94895f06b840 | file object: 0xffff94895f06b8c0 | offsetby: 0x80 \Windows\System32\browserbroker.dll pool: 0xffff94895f06b9d0 | file object: 0xffff94895f06ba50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06bb60 | file object: 0xffff94895f06bbe0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 pool: 0xffff94895f06bcf0 | file object: 0xffff94895f06bd70 | offsetby: 0x80 \$Directory pool: 0xffff94895f06c010 | file object: 0xffff94895f06c090 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\edb.chk pool: 0xffff94895f06c1a0 | file object: 0xffff94895f06c220 | offsetby: 0x80 \Windows\Prefetch\WINDOWS.WARP.JITSERVICE.EXE-CC70B00D.pf pool: 0xffff94895f06c330 | file object: 0xffff94895f06c3b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\LogFiles\edb.log pool: 0xffff94895f06c4c0 | file object: 0xffff94895f06c540 | offsetby: 0x80 \Windows\Fonts\StaticCache.dat pool: 0xffff94895f06c650 | file object: 0xffff94895f06c6d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06c7e0 | file object: 0xffff94895f06c860 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06c970 | file object: 0xffff94895f06c9f0 | offsetby: 0x80 \Windows\System32\en-US\Conhost.exe.mui pool: 0xffff94895f06cb00 | file object: 0xffff94895f06cb80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06cc90 | file object: 0xffff94895f06cd10 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f06ce20 | file object: 0xffff94895f06cea0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.18362.449.0_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895f06d140 | file object: 0xffff94895f06d1c0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.jfm pool: 0xffff94895f06d2d0 | file object: 0xffff94895f06d350 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Security-LessPrivilegedAppContainer%4Operational.evtx pool: 0xffff94895f06d460 | file object: 0xffff94895f06d4e0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.002 pool: 0xffff94895f06d5f0 | file object: 0xffff94895f06d670 | offsetby: 0x80 \Windows\System32\Windows.System.Profile.RetailInfo.dll pool: 0xffff94895f06d780 | file object: 0xffff94895f06d800 | offsetby: 0x80 \Windows\System32\AssignedAccessRuntime.dll pool: 0xffff94895f06d910 | file object: 0xffff94895f06d990 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eView.dll pool: 0xffff94895f06daa0 | file object: 0xffff94895f06db20 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF86857E4B654C726A.TMP pool: 0xffff94895f06dc30 | file object: 0xffff94895f06dcb0 | offsetby: 0x80 \$Directory pool: 0xffff94895f06ddc0 | file object: 0xffff94895f06de40 | offsetby: 0x80 \$Directory pool: 0xffff94895f06e0e0 | file object: 0xffff94895f06e160 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f06e270 | file object: 0xffff94895f06e2f0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb pool: 0xffff94895f06e400 | file object: 0xffff94895f06e480 | offsetby: 0x80 \$ConvertToNonresident pool: 0xffff94895f06e590 | file object: 0xffff94895f06e610 | offsetby: 0x80 \Windows\System32\Windows.System.Diagnostics.dll pool: 0xffff94895f06e720 | file object: 0xffff94895f06e7a0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f06e8b0 | file object: 0xffff94895f06e930 | offsetby: 0x80 \$PrepareToShrinkFileSize pool: 0xffff94895f06ea40 | file object: 0xffff94895f06eac0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06ebd0 | file object: 0xffff94895f06ec50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06ed60 | file object: 0xffff94895f06ede0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06f080 | file object: 0xffff94895f06f100 | offsetby: 0x80 \Windows\System32\MicrosoftEdgeCP.exe pool: 0xffff94895f06f210 | file object: 0xffff94895f06f290 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06f3a0 | file object: 0xffff94895f06f420 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06f530 | file object: 0xffff94895f06f5b0 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 pool: 0xffff94895f06f6c0 | file object: 0xffff94895f06f740 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06f850 | file object: 0xffff94895f06f8d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f06f9e0 | file object: 0xffff94895f06fa60 | offsetby: 0x80 \Windows\System32\ieproxy.dll pool: 0xffff94895f06fb70 | file object: 0xffff94895f06fbf0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db pool: 0xffff94895f06fd00 | file object: 0xffff94895f06fd80 | offsetby: 0x80 \Windows\System32\backgroundTaskHost.exe pool: 0xffff94895f070020 | file object: 0xffff94895f0700a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0701b0 | file object: 0xffff94895f070230 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\da53ab2cffb3ee4dcecda3d584ce2ff6c3ff69cc\ef14ecac6b7b126a5ad6df32af131342e7dcb20ed7c03ef845d4135a41f00926 pool: 0xffff94895f070340 | file object: 0xffff94895f0703c0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f0704d0 | file object: 0xffff94895f070550 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f070660 | file object: 0xffff94895f0706e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0707f0 | file object: 0xffff94895f070870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f070980 | file object: 0xffff94895f070a00 | offsetby: 0x80 \Windows\SystemResources\batmeter.dll.mun pool: 0xffff94895f070b10 | file object: 0xffff94895f070b90 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db pool: 0xffff94895f070ca0 | file object: 0xffff94895f070d20 | offsetby: 0x80 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.001 pool: 0xffff94895f070e30 | file object: 0xffff94895f070eb0 | offsetby: 0x80 \Windows\System32\MicrosoftEdgeSH.exe pool: 0xffff94895f071150 | file object: 0xffff94895f0711d0 | offsetby: 0x80 \Windows\System32\Windows.System.Profile.RetailInfo.dll pool: 0xffff94895f0712e0 | file object: 0xffff94895f071360 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f071470 | file object: 0xffff94895f0714f0 | offsetby: 0x80 \Windows\System32\AssignedAccessRuntime.dll pool: 0xffff94895f071600 | file object: 0xffff94895f071680 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f071790 | file object: 0xffff94895f071810 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895f071920 | file object: 0xffff94895f0719a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f071ab0 | file object: 0xffff94895f071b30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f071c40 | file object: 0xffff94895f071cc0 | offsetby: 0x80 \Windows\System32\ShellExperiences\WindowsInternal.Xaml.Controls.Tabs.dll pool: 0xffff94895f071dd0 | file object: 0xffff94895f071e50 | offsetby: 0x80 \Windows\Prefetch\BACKGROUNDTASKHOST.EXE-A4F5A8B5.pf pool: 0xffff94895f0720f0 | file object: 0xffff94895f072170 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f072280 | file object: 0xffff94895f072300 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f072410 | file object: 0xffff94895f072490 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0725a0 | file object: 0xffff94895f072620 | offsetby: 0x80 \Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll pool: 0xffff94895f072730 | file object: 0xffff94895f0727b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0728c0 | file object: 0xffff94895f072940 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f072a50 | file object: 0xffff94895f072ad0 | offsetby: 0x80 \Windows\System32\UserDeviceRegistration.dll pool: 0xffff94895f072be0 | file object: 0xffff94895f072c60 | offsetby: 0x80 \Windows\SysWOW64\Windows.Networking.Connectivity.dll pool: 0xffff94895f072d70 | file object: 0xffff94895f072df0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f073090 | file object: 0xffff94895f073110 | offsetby: 0x80 \Windows\System32\Windows.System.Diagnostics.dll pool: 0xffff94895f073220 | file object: 0xffff94895f0732a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0733b0 | file object: 0xffff94895f073430 | offsetby: 0x80 \Windows\Prefetch\MICROSOFTEDGECP.EXE-13523D81.pf pool: 0xffff94895f073540 | file object: 0xffff94895f0735c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0736d0 | file object: 0xffff94895f073750 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f073860 | file object: 0xffff94895f0738e0 | offsetby: 0x80 \Windows\SysWOW64\twinapi.appcore.dll pool: 0xffff94895f0739f0 | file object: 0xffff94895f073a70 | offsetby: 0x80 \$Directory pool: 0xffff94895f073b80 | file object: 0xffff94895f073c00 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\eView.dll pool: 0xffff94895f073d10 | file object: 0xffff94895f073d90 | offsetby: 0x80 \Windows\SysWOW64\rmclient.dll pool: 0xffff94895f074030 | file object: 0xffff94895f0740b0 | offsetby: 0x80 \Windows\SysWOW64\FamilySafetyExt.dll pool: 0xffff94895f0741c0 | file object: 0xffff94895f074240 | offsetby: 0x80 \Windows\SysWOW64\Wpc.dll pool: 0xffff94895f074350 | file object: 0xffff94895f0743d0 | offsetby: 0x80 \Windows\Prefetch\BACKGROUNDTASKHOST.EXE-901440A8.pf pool: 0xffff94895f0744e0 | file object: 0xffff94895f074560 | offsetby: 0x80 pool: 0xffff94895f074670 | file object: 0xffff94895f0746f0 | offsetby: 0x80 \Windows\SysWOW64\wlidprov.dll pool: 0xffff94895f074800 | file object: 0xffff94895f074880 | offsetby: 0x80 \Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll pool: 0xffff94895f074990 | file object: 0xffff94895f074a10 | offsetby: 0x80 \Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll pool: 0xffff94895f074b20 | file object: 0xffff94895f074ba0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f074cb0 | file object: 0xffff94895f074d30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f074e40 | file object: 0xffff94895f074ec0 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.Core.dll pool: 0xffff94895f075160 | file object: 0xffff94895f0751e0 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.ShellCommonInetCore\WindowsInternal.Xaml.Controls.Tabs\Assets\Fonts\BrowserMDL.ttf pool: 0xffff94895f0752f0 | file object: 0xffff94895f075370 | offsetby: 0x80 \Windows\SysWOW64\mssprxy.dll pool: 0xffff94895f075480 | file object: 0xffff94895f075500 | offsetby: 0x80 \Windows\System32\webplatstorageserver.dll pool: 0xffff94895f075610 | file object: 0xffff94895f075690 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0757a0 | file object: 0xffff94895f075820 | offsetby: 0x80 \$Directory pool: 0xffff94895f075930 | file object: 0xffff94895f0759b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f075ac0 | file object: 0xffff94895f075b40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f075c50 | file object: 0xffff94895f075cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f075de0 | file object: 0xffff94895f075e60 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\b9d4f671d73c2e162e766b3cd991aa31e2d4cabd\b9d4f671d73c2e162e766b3cd991aa31e2d4cabd.pieceshash pool: 0xffff94895f076100 | file object: 0xffff94895f076180 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\Fonts\BrowserMDL.ttf pool: 0xffff94895f076290 | file object: 0xffff94895f076310 | offsetby: 0x80 \Windows\SysWOW64\edputil.dll pool: 0xffff94895f076420 | file object: 0xffff94895f0764a0 | offsetby: 0x80 \Windows\System32\ActivationClient.dll pool: 0xffff94895f0765b0 | file object: 0xffff94895f076630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f076740 | file object: 0xffff94895f0767c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f0768d0 | file object: 0xffff94895f076950 | offsetby: 0x80 \$Directory pool: 0xffff94895f076a60 | file object: 0xffff94895f076ae0 | offsetby: 0x80 \$Directory pool: 0xffff94895f076bf0 | file object: 0xffff94895f076c70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f076d80 | file object: 0xffff94895f076e00 | offsetby: 0x80 \Windows\System32\wshext.dll pool: 0xffff94895f0770a0 | file object: 0xffff94895f077120 | offsetby: 0x80 \Windows\SysWOW64\Windows.Services.TargetedContent.dll pool: 0xffff94895f077230 | file object: 0xffff94895f0772b0 | offsetby: 0x80 \Windows\System32\en-US\vsstrace.dll.mui pool: 0xffff94895f0773c0 | file object: 0xffff94895f077440 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll pool: 0xffff94895f077550 | file object: 0xffff94895f0775d0 | offsetby: 0x80 \Windows\System32\InstallService.dll pool: 0xffff94895f0776e0 | file object: 0xffff94895f077760 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\ImageStore\ytdy751\imagestore.dat pool: 0xffff94895f077870 | file object: 0xffff94895f0778f0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\ContextMenu\HandleDefine.js pool: 0xffff94895f077a00 | file object: 0xffff94895f077a80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f077b90 | file object: 0xffff94895f077c10 | offsetby: 0x80 \Windows\System32\en-US\hcproviders.dll.mui pool: 0xffff94895f077d20 | file object: 0xffff94895f077da0 | offsetby: 0x80 \Windows\SysWOW64\samcli.dll pool: 0xffff94895f078040 | file object: 0xffff94895f0780c0 | offsetby: 0x80 \Windows\System32\ieframe.dll pool: 0xffff94895f0781d0 | file object: 0xffff94895f078250 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f078360 | file object: 0xffff94895f0783e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0784f0 | file object: 0xffff94895f078570 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f078680 | file object: 0xffff94895f078700 | offsetby: 0x80 \Windows\System32\dxva2.dll pool: 0xffff94895f078810 | file object: 0xffff94895f078890 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll pool: 0xffff94895f0789a0 | file object: 0xffff94895f078a20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f078b30 | file object: 0xffff94895f078bb0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db pool: 0xffff94895f078cc0 | file object: 0xffff94895f078d40 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f078e50 | file object: 0xffff94895f078ed0 | offsetby: 0x80 \Windows\System32\en-US\wshext.dll.mui pool: 0xffff94895f079170 | file object: 0xffff94895f0791f0 | offsetby: 0x80 \Windows\System32\AppxStreamingDataSourcePS.dll pool: 0xffff94895f079300 | file object: 0xffff94895f079380 | offsetby: 0x80 \Windows\TextInput\WindowsInternal.ComposableShell.Experiences.TextInput.LayoutData.dll pool: 0xffff94895f079490 | file object: 0xffff94895f079510 | offsetby: 0x80 \Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll pool: 0xffff94895f079620 | file object: 0xffff94895f0796a0 | offsetby: 0x80 탲滧疸贶舎￿.䥍剃协䙏⹔䕎⹔䅎䥔䕖刮乕䥔䕍㈮㈮㡟䕗奋㍂㡄 pool: 0xffff94895f0797b0 | file object: 0xffff94895f079830 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3234566417-3121902272-2793192418-1001-MergedResources-1.pri pool: 0xffff94895f079940 | file object: 0xffff94895f0799c0 | offsetby: 0x80 \Windows\System32\lfsvc.dll pool: 0xffff94895f079ad0 | file object: 0xffff94895f079b50 | offsetby: 0x80 \$Directory pool: 0xffff94895f079c60 | file object: 0xffff94895f079ce0 | offsetby: 0x80 \Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20200.0_x64__8wekyb3d8bbwe\resources.pri pool: 0xffff94895f079df0 | file object: 0xffff94895f079e70 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk pool: 0xffff94895f07a110 | file object: 0xffff94895f07a190 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Visual Studio 2019.lnk pool: 0xffff94895f07a2a0 | file object: 0xffff94895f07a320 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f07a430 | file object: 0xffff94895f07a4b0 | offsetby: 0x80 \Program Files\desktop.ini pool: 0xffff94895f07a5c0 | file object: 0xffff94895f07a640 | offsetby: 0x80 \$Directory pool: 0xffff94895f07a750 | file object: 0xffff94895f07a7d0 | offsetby: 0x80 \Windows\SysWOW64\StructuredQuery.dll pool: 0xffff94895f07a8e0 | file object: 0xffff94895f07a960 | offsetby: 0x80 \$Directory pool: 0xffff94895f07aa70 | file object: 0xffff94895f07aaf0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\resources.pri pool: 0xffff94895f07ac00 | file object: 0xffff94895f07ac80 | offsetby: 0x80 \Windows\System32\EdgeContent.dll pool: 0xffff94895f07ad90 | file object: 0xffff94895f07ae10 | offsetby: 0x80 \Windows\System32\POSyncServices.dll pool: 0xffff94895f07b0b0 | file object: 0xffff94895f07b130 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f07b240 | file object: 0xffff94895f07b2c0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_2a285cc246691ef5 pool: 0xffff94895f07b3d0 | file object: 0xffff94895f07b450 | offsetby: 0x80 \Windows\System32\wshext.dll pool: 0xffff94895f07b560 | file object: 0xffff94895f07b5e0 | offsetby: 0x80 \Windows\SysWOW64\rasadhlp.dll pool: 0xffff94895f07b6f0 | file object: 0xffff94895f07b770 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f07b880 | file object: 0xffff94895f07b900 | offsetby: 0x80 \Windows\SysWOW64\Windows.Storage.Search.dll pool: 0xffff94895f07ba10 | file object: 0xffff94895f07ba90 | offsetby: 0x80 \Windows\SysWOW64\wshqos.dll pool: 0xffff94895f07bba0 | file object: 0xffff94895f07bc20 | offsetby: 0x80 \Windows\SysWOW64\schannel.dll pool: 0xffff94895f07bd30 | file object: 0xffff94895f07bdb0 | offsetby: 0x80 \$Directory pool: 0xffff94895f07c050 | file object: 0xffff94895f07c0d0 | offsetby: 0x80 \$Directory pool: 0xffff94895f07c1e0 | file object: 0xffff94895f07c260 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini pool: 0xffff94895f07c370 | file object: 0xffff94895f07c3f0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini pool: 0xffff94895f07c500 | file object: 0xffff94895f07c580 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini pool: 0xffff94895f07c690 | file object: 0xffff94895f07c710 | offsetby: 0x80 \Windows\SysWOW64\WindowsCodecs.dll pool: 0xffff94895f07c820 | file object: 0xffff94895f07c8a0 | offsetby: 0x80 \Windows\SysWOW64\cscapi.dll pool: 0xffff94895f07c9b0 | file object: 0xffff94895f07ca30 | offsetby: 0x80 \Windows\SysWOW64\OnDemandConnRouteHelper.dll pool: 0xffff94895f07cb40 | file object: 0xffff94895f07cbc0 | offsetby: 0x80 \$Directory pool: 0xffff94895f07ccd0 | file object: 0xffff94895f07cd50 | offsetby: 0x80 \Windows\SysWOW64\FWPUCLNT.DLL pool: 0xffff94895f07ce60 | file object: 0xffff94895f07cee0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db pool: 0xffff94895f07d180 | file object: 0xffff94895f07d200 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini pool: 0xffff94895f07d310 | file object: 0xffff94895f07d390 | offsetby: 0x80 \Windows\SysWOW64\apphelp.dll pool: 0xffff94895f07d4a0 | file object: 0xffff94895f07d520 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini pool: 0xffff94895f07d630 | file object: 0xffff94895f07d6b0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini pool: 0xffff94895f07d7c0 | file object: 0xffff94895f07d840 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini pool: 0xffff94895f07d950 | file object: 0xffff94895f07d9d0 | offsetby: 0x80 \Windows\SysWOW64\Windows.StateRepositoryPS.dll pool: 0xffff94895f07dae0 | file object: 0xffff94895f07db60 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini pool: 0xffff94895f07dc70 | file object: 0xffff94895f07dcf0 | offsetby: 0x80 \Windows\SysWOW64\winnsi.dll pool: 0xffff94895f07de00 | file object: 0xffff94895f07de80 | offsetby: 0x80 嗭͘訦舎￿&䅻㥄㐷䕁ⴲ㉅㈹㐭㠰ⴳ㉁〸〭㐳 pool: 0xffff94895f07e120 | file object: 0xffff94895f07e1a0 | offsetby: 0x80 \Windows\System32\MicrosoftEdgeSH.exe pool: 0xffff94895f07e2b0 | file object: 0xffff94895f07e330 | offsetby: 0x80 \Windows\SysWOW64\ntshrui.dll pool: 0xffff94895f07e440 | file object: 0xffff94895f07e4c0 | offsetby: 0x80 \Windows\SysWOW64\dpapi.dll pool: 0xffff94895f07e5d0 | file object: 0xffff94895f07e650 | offsetby: 0x80 \Windows\System32\EdgeContent.dll pool: 0xffff94895f07e760 | file object: 0xffff94895f07e7e0 | offsetby: 0x80 \Windows\System32\Cortana.Persona.dll pool: 0xffff94895f07e8f0 | file object: 0xffff94895f07e970 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini pool: 0xffff94895f07ea80 | file object: 0xffff94895f07eb00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f07ec10 | file object: 0xffff94895f07ec90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f07eda0 | file object: 0xffff94895f07ee20 | offsetby: 0x80 \$Directory pool: 0xffff94895f07f0c0 | file object: 0xffff94895f07f140 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini pool: 0xffff94895f07f250 | file object: 0xffff94895f07f2d0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f07f3e0 | file object: 0xffff94895f07f460 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f07f570 | file object: 0xffff94895f07f5f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f07f700 | file object: 0xffff94895f07f780 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f07f890 | file object: 0xffff94895f07f910 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini pool: 0xffff94895f07fa20 | file object: 0xffff94895f07faa0 | offsetby: 0x80 \Windows\System32\msi.dll pool: 0xffff94895f07fbb0 | file object: 0xffff94895f07fc30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f07fd40 | file object: 0xffff94895f07fdc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f080060 | file object: 0xffff94895f0800e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0801f0 | file object: 0xffff94895f080270 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini pool: 0xffff94895f080380 | file object: 0xffff94895f080400 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f080510 | file object: 0xffff94895f080590 | offsetby: 0x80 \Windows\System32\shdocvw.dll pool: 0xffff94895f0806a0 | file object: 0xffff94895f080720 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f080830 | file object: 0xffff94895f0808b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0809c0 | file object: 0xffff94895f080a40 | offsetby: 0x80 \Windows\System32\mmres.dll pool: 0xffff94895f080b50 | file object: 0xffff94895f080bd0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f080ce0 | file object: 0xffff94895f080d60 | offsetby: 0x80 \Windows\SystemResources\mmres.dll.mun pool: 0xffff94895f080e70 | file object: 0xffff94895f080ef0 | offsetby: 0x80 \Windows\System32\DXP.dll pool: 0xffff94895f081000 | file object: 0xffff94895f081080 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f081190 | file object: 0xffff94895f081210 | offsetby: 0x80 \$Directory pool: 0xffff94895f081320 | file object: 0xffff94895f0813a0 | offsetby: 0x80 \Windows\System32\pnidui.dll pool: 0xffff94895f0814b0 | file object: 0xffff94895f081530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f081640 | file object: 0xffff94895f0816c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f0817d0 | file object: 0xffff94895f081850 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini pool: 0xffff94895f081960 | file object: 0xffff94895f0819e0 | offsetby: 0x80 \Windows\System32\en-US\bthprops.cpl.mui pool: 0xffff94895f081af0 | file object: 0xffff94895f081b70 | offsetby: 0x80 \Windows\System32\bthprops.cpl pool: 0xffff94895f081c80 | file object: 0xffff94895f081d00 | offsetby: 0x80 \Windows\SysWOW64\mskeyprotect.dll pool: 0xffff94895f081e10 | file object: 0xffff94895f081e90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f082130 | file object: 0xffff94895f0821b0 | offsetby: 0x80 \Windows\System32\en-US\lfsvc.dll.mui pool: 0xffff94895f0822c0 | file object: 0xffff94895f082340 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\b9d4f671d73c2e162e766b3cd991aa31e2d4cabd\27c4cb88ba64cc52d022bbf51d1011ff214c2620a0431d6f6896d4822a569ea3 pool: 0xffff94895f082450 | file object: 0xffff94895f0824d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f0825e0 | file object: 0xffff94895f082660 | offsetby: 0x80 \Windows\SysWOW64\cryptnet.dll pool: 0xffff94895f082770 | file object: 0xffff94895f0827f0 | offsetby: 0x80 \Windows\System32\en-US\pnidui.dll.mui pool: 0xffff94895f082900 | file object: 0xffff94895f082980 | offsetby: 0x80 \Windows\SysWOW64\ncryptsslp.dll pool: 0xffff94895f082a90 | file object: 0xffff94895f082b10 | offsetby: 0x80 \Windows\SysWOW64\dsreg.dll pool: 0xffff94895f082c20 | file object: 0xffff94895f082ca0 | offsetby: 0x80 \Windows\System32\en-US\sihclient.exe.mui pool: 0xffff94895f082db0 | file object: 0xffff94895f082e30 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f17b8c0 | file object: 0xffff94895f17b920 | offsetby: 0x60 \Windows\System32\config\DRIVERS pool: 0xffff94895f6b7160 | file object: 0xffff94895f6b71e0 | offsetby: 0x80 \Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll pool: 0xffff94895f6b72f0 | file object: 0xffff94895f6b7370 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6b7480 | file object: 0xffff94895f6b7500 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6b7610 | file object: 0xffff94895f6b7690 | offsetby: 0x80 \Windows\System32\LocationFramework.dll pool: 0xffff94895f6b77a0 | file object: 0xffff94895f6b7820 | offsetby: 0x80 \Windows\System32\WPDShServiceObj.dll pool: 0xffff94895f6b7930 | file object: 0xffff94895f6b79b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6b7ac0 | file object: 0xffff94895f6b7b40 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895f6b7c50 | file object: 0xffff94895f6b7cd0 | offsetby: 0x80 \Windows\System32\authui.dll pool: 0xffff94895f6b7de0 | file object: 0xffff94895f6b7e60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6b8100 | file object: 0xffff94895f6b8180 | offsetby: 0x80 \Windows\System32\dlnashext.dll pool: 0xffff94895f6b8290 | file object: 0xffff94895f6b8310 | offsetby: 0x80 \Windows\System32\mssitlb.dll pool: 0xffff94895f6b8420 | file object: 0xffff94895f6b84a0 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe pool: 0xffff94895f6b85b0 | file object: 0xffff94895f6b8630 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6b8740 | file object: 0xffff94895f6b87c0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c pool: 0xffff94895f6b88d0 | file object: 0xffff94895f6b8950 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6b8a60 | file object: 0xffff94895f6b8ae0 | offsetby: 0x80 \Windows\System32\SettingMonitor.dll pool: 0xffff94895f6b8bf0 | file object: 0xffff94895f6b8c70 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini pool: 0xffff94895f6b8d80 | file object: 0xffff94895f6b8e00 | offsetby: 0x80 \Windows\System32\PortableDeviceTypes.dll pool: 0xffff94895f6b90a0 | file object: 0xffff94895f6b9120 | offsetby: 0x80 \Windows\System32\wpdshext.dll pool: 0xffff94895f6b9230 | file object: 0xffff94895f6b92b0 | offsetby: 0x80 \Windows\System32\efswrt.dll pool: 0xffff94895f6b93c0 | file object: 0xffff94895f6b9440 | offsetby: 0x80 \Windows\System32\feclient.dll pool: 0xffff94895f6b9550 | file object: 0xffff94895f6b95d0 | offsetby: 0x80 \$Recycle.Bin\S-1-5-21-3234566417-3121902272-2793192418-1001\desktop.ini pool: 0xffff94895f6b96e0 | file object: 0xffff94895f6b9760 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat pool: 0xffff94895f6b9870 | file object: 0xffff94895f6b98f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6b9a00 | file object: 0xffff94895f6b9a80 | offsetby: 0x80 \$Directory pool: 0xffff94895f6b9b90 | file object: 0xffff94895f6b9c10 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\976920a9e138a58776e06737ca31b577027d35a5\976920a9e138a58776e06737ca31b577027d35a5.pieceshash pool: 0xffff94895f6b9d20 | file object: 0xffff94895f6b9da0 | offsetby: 0x80 \Windows\System32\mscoree.dll pool: 0xffff94895f6ba040 | file object: 0xffff94895f6ba0c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ba1d0 | file object: 0xffff94895f6ba250 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ba360 | file object: 0xffff94895f6ba3e0 | offsetby: 0x80 \Windows\System32\cscobj.dll pool: 0xffff94895f6ba4f0 | file object: 0xffff94895f6ba570 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6ba680 | file object: 0xffff94895f6ba700 | offsetby: 0x80 \Windows\System32\LocationFrameworkPS.dll pool: 0xffff94895f6ba810 | file object: 0xffff94895f6ba890 | offsetby: 0x80 \Windows\System32\wlrmdr.exe pool: 0xffff94895f6ba9a0 | file object: 0xffff94895f6baa20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bab30 | file object: 0xffff94895f6babb0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\TempState\CortanaUnifiedTileModelCache.dat pool: 0xffff94895f6bacc0 | file object: 0xffff94895f6bad40 | offsetby: 0x80 \Windows\System32\CapabilityAccessManager.dll pool: 0xffff94895f6bae50 | file object: 0xffff94895f6baed0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 pool: 0xffff94895f6bb170 | file object: 0xffff94895f6bb1f0 | offsetby: 0x80 \Windows\System32\en-US\CapabilityAccessManager.dll.mui pool: 0xffff94895f6bb300 | file object: 0xffff94895f6bb380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bb490 | file object: 0xffff94895f6bb510 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895f6bb620 | file object: 0xffff94895f6bb6a0 | offsetby: 0x80 \Windows\System32\cscsvc.dll pool: 0xffff94895f6bb7b0 | file object: 0xffff94895f6bb830 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bb940 | file object: 0xffff94895f6bb9c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bbad0 | file object: 0xffff94895f6bbb50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bbc60 | file object: 0xffff94895f6bbce0 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-090AEBE5.pf pool: 0xffff94895f6bbdf0 | file object: 0xffff94895f6bbe70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bc110 | file object: 0xffff94895f6bc190 | offsetby: 0x80 \$Directory pool: 0xffff94895f6bc2a0 | file object: 0xffff94895f6bc320 | offsetby: 0x80 \Windows\System32\srchadmin.dll pool: 0xffff94895f6bc430 | file object: 0xffff94895f6bc4b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bc5c0 | file object: 0xffff94895f6bc640 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bc750 | file object: 0xffff94895f6bc7d0 | offsetby: 0x80 \Windows\System32\en-US\combase.dll.mui pool: 0xffff94895f6bc8e0 | file object: 0xffff94895f6bc960 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6bca70 | file object: 0xffff94895f6bcaf0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bcc00 | file object: 0xffff94895f6bcc80 | offsetby: 0x80 \Windows\System32\LocationFrameworkPS.dll pool: 0xffff94895f6bcd90 | file object: 0xffff94895f6bce10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bd0b0 | file object: 0xffff94895f6bd130 | offsetby: 0x80 \Windows\System32\en-US\cscsvc.dll.mui pool: 0xffff94895f6bd240 | file object: 0xffff94895f6bd2c0 | offsetby: 0x80 \Windows\System32\LocationFramework.dll pool: 0xffff94895f6bd3d0 | file object: 0xffff94895f6bd450 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f6bd560 | file object: 0xffff94895f6bd5e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bd6f0 | file object: 0xffff94895f6bd770 | offsetby: 0x80 \$Directory pool: 0xffff94895f6bd880 | file object: 0xffff94895f6bd900 | offsetby: 0x80 \$Directory pool: 0xffff94895f6bda10 | file object: 0xffff94895f6bda90 | offsetby: 0x80 \Windows\System32\WsmSvc.dll pool: 0xffff94895f6bdba0 | file object: 0xffff94895f6bdc20 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\f455bd2b81c5b3aff628375d20ed9068848033cd\f455bd2b81c5b3aff628375d20ed9068848033cd.pieceshash pool: 0xffff94895f6bdd30 | file object: 0xffff94895f6bddb0 | offsetby: 0x80 \Windows\System32\SearchProtocolHost.exe pool: 0xffff94895f6be050 | file object: 0xffff94895f6be0d0 | offsetby: 0x80 \Windows\System32\CapabilityAccessHandlers.dll pool: 0xffff94895f6be1e0 | file object: 0xffff94895f6be260 | offsetby: 0x80 \Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf pool: 0xffff94895f6be370 | file object: 0xffff94895f6be3f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\cpp\package.nls.json pool: 0xffff94895f6be500 | file object: 0xffff94895f6be580 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f6be690 | file object: 0xffff94895f6be710 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f6be820 | file object: 0xffff94895f6be8a0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895f6be9b0 | file object: 0xffff94895f6bea30 | offsetby: 0x80 \Windows\System32\SearchFilterHost.exe pool: 0xffff94895f6beb40 | file object: 0xffff94895f6bebc0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6becd0 | file object: 0xffff94895f6bed50 | offsetby: 0x80 \$Directory pool: 0xffff94895f6bee60 | file object: 0xffff94895f6beee0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bf180 | file object: 0xffff94895f6bf200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6bf310 | file object: 0xffff94895f6bf390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6bf4a0 | file object: 0xffff94895f6bf520 | offsetby: 0x80 \ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat pool: 0xffff94895f6bf630 | file object: 0xffff94895f6bf6b0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f6bf7c0 | file object: 0xffff94895f6bf840 | offsetby: 0x80 \Windows\System32\imapi2.dll pool: 0xffff94895f6bf950 | file object: 0xffff94895f6bf9d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat pool: 0xffff94895f6bfae0 | file object: 0xffff94895f6bfb60 | offsetby: 0x80 \Windows\System32\LocationWinPalMisc.dll pool: 0xffff94895f6bfc70 | file object: 0xffff94895f6bfcf0 | offsetby: 0x80 \Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf pool: 0xffff94895f6bfe00 | file object: 0xffff94895f6bfe80 | offsetby: 0x80 \Windows\System32\LocationWinPalMisc.dll pool: 0xffff94895f6c0120 | file object: 0xffff94895f6c01a0 | offsetby: 0x80 \Windows\System32\SyncCenter.dll pool: 0xffff94895f6c02b0 | file object: 0xffff94895f6c0330 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\2ab9225a1e821c43e98be3dd12d21ba7\System.Runtime.Serialization.ni.dll pool: 0xffff94895f6c0440 | file object: 0xffff94895f6c04c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6c05d0 | file object: 0xffff94895f6c0650 | offsetby: 0x80 \Windows\System32\MdmCommon.dll pool: 0xffff94895f6c0760 | file object: 0xffff94895f6c07e0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 pool: 0xffff94895f6c08f0 | file object: 0xffff94895f6c0970 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895f6c0a80 | file object: 0xffff94895f6c0b00 | offsetby: 0x80 \Windows\System32\CertEnroll.dll pool: 0xffff94895f6c0c10 | file object: 0xffff94895f6c0c90 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-72C0C855.pf pool: 0xffff94895f6c0da0 | file object: 0xffff94895f6c0e20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c10c0 | file object: 0xffff94895f6c1140 | offsetby: 0x80 \Windows\System32\CapabilityAccessHandlers.dll pool: 0xffff94895f6c1250 | file object: 0xffff94895f6c12d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c13e0 | file object: 0xffff94895f6c1460 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6c1570 | file object: 0xffff94895f6c15f0 | offsetby: 0x80 \Windows\System32\tcpmon.dll pool: 0xffff94895f6c1700 | file object: 0xffff94895f6c1780 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338388\9d30bd047ade42c6818149bac1bca22f_1 pool: 0xffff94895f6c1890 | file object: 0xffff94895f6c1910 | offsetby: 0x80 \Windows\System32\SgrmBroker.exe pool: 0xffff94895f6c1a20 | file object: 0xffff94895f6c1aa0 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895f6c1bb0 | file object: 0xffff94895f6c1c30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6c1d40 | file object: 0xffff94895f6c1dc0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\csharp\package.json pool: 0xffff94895f6c2060 | file object: 0xffff94895f6c20e0 | offsetby: 0x80 \Windows\System32\tzautoupdate.dll pool: 0xffff94895f6c21f0 | file object: 0xffff94895f6c2270 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6c2380 | file object: 0xffff94895f6c2400 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c2510 | file object: 0xffff94895f6c2590 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MpDlpCmd.exe pool: 0xffff94895f6c26a0 | file object: 0xffff94895f6c2720 | offsetby: 0x80 \Windows\System32\MdmCommon.dll pool: 0xffff94895f6c2830 | file object: 0xffff94895f6c28b0 | offsetby: 0x80 \Windows\System32\en-US\tzautoupdate.dll.mui pool: 0xffff94895f6c29c0 | file object: 0xffff94895f6c2a40 | offsetby: 0x80 \Windows\System32\certca.dll pool: 0xffff94895f6c2b50 | file object: 0xffff94895f6c2bd0 | offsetby: 0x80 \Windows\System32\cellulardatacapabilityhandler.dll pool: 0xffff94895f6c2ce0 | file object: 0xffff94895f6c2d60 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c2e70 | file object: 0xffff94895f6c2ef0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\csharp\package.nls.json pool: 0xffff94895f6c3000 | file object: 0xffff94895f6c3080 | offsetby: 0x80 \Windows\System32\winspool.drv pool: 0xffff94895f6c3190 | file object: 0xffff94895f6c3210 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c3320 | file object: 0xffff94895f6c33a0 | offsetby: 0x80 \Windows\System32\FXSMON.dll pool: 0xffff94895f6c34b0 | file object: 0xffff94895f6c3530 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c3640 | file object: 0xffff94895f6c36c0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 pool: 0xffff94895f6c37d0 | file object: 0xffff94895f6c3850 | offsetby: 0x80 \Windows\System32\en-US\imapi2.dll.mui pool: 0xffff94895f6c3960 | file object: 0xffff94895f6c39e0 | offsetby: 0x80 \Windows\System32\usbmon.dll pool: 0xffff94895f6c3af0 | file object: 0xffff94895f6c3b70 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\33a91f943c076aa8.automaticDestinations-ms pool: 0xffff94895f6c3c80 | file object: 0xffff94895f6c3d00 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\appsglobals.txt pool: 0xffff94895f6c3e10 | file object: 0xffff94895f6c3e90 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ActivationStore.dat pool: 0xffff94895f6c4130 | file object: 0xffff94895f6c41b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6c42c0 | file object: 0xffff94895f6c4340 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6c4450 | file object: 0xffff94895f6c44d0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ActivationStore.dat.LOG2 pool: 0xffff94895f6c45e0 | file object: 0xffff94895f6c4660 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c4770 | file object: 0xffff94895f6c47f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c4900 | file object: 0xffff94895f6c4980 | offsetby: 0x80 \Windows\System32\snmpapi.dll pool: 0xffff94895f6c4a90 | file object: 0xffff94895f6c4b10 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\msvcp140_app.dll pool: 0xffff94895f6c4c20 | file object: 0xffff94895f6c4ca0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\concrt140_app.dll pool: 0xffff94895f6c4db0 | file object: 0xffff94895f6c4e30 | offsetby: 0x80 \Windows\System32\wsnmp32.dll pool: 0xffff94895f6c50d0 | file object: 0xffff94895f6c5150 | offsetby: 0x80 \Windows\System32\en-US\APMon.dll.mui pool: 0xffff94895f6c5260 | file object: 0xffff94895f6c52e0 | offsetby: 0x80 \Windows\System32\mobsync.exe pool: 0xffff94895f6c53f0 | file object: 0xffff94895f6c5470 | offsetby: 0x80 \Windows\System32\deviceassociation.dll pool: 0xffff94895f6c5580 | file object: 0xffff94895f6c5600 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f6c5710 | file object: 0xffff94895f6c5790 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f6c58a0 | file object: 0xffff94895f6c5920 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c5a30 | file object: 0xffff94895f6c5ab0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c5bc0 | file object: 0xffff94895f6c5c40 | offsetby: 0x80 \Windows\System32\WSDApi.dll pool: 0xffff94895f6c5d50 | file object: 0xffff94895f6c5dd0 | offsetby: 0x80 \Windows\System32\en-US\shell32.dll.mui pool: 0xffff94895f6c6070 | file object: 0xffff94895f6c60f0 | offsetby: 0x80 \Windows\System32\win32spl.dll pool: 0xffff94895f6c6200 | file object: 0xffff94895f6c6280 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c6390 | file object: 0xffff94895f6c6410 | offsetby: 0x80 \Windows\System32\drvstore.dll pool: 0xffff94895f6c6520 | file object: 0xffff94895f6c65a0 | offsetby: 0x80 \Windows\System32\APMon.dll pool: 0xffff94895f6c66b0 | file object: 0xffff94895f6c6730 | offsetby: 0x80 \Windows\System32\spool\prtprocs\x64\winprint.dll pool: 0xffff94895f6c6840 | file object: 0xffff94895f6c68c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c69d0 | file object: 0xffff94895f6c6a50 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ActivationStore.dat.LOG1 pool: 0xffff94895f6c6b60 | file object: 0xffff94895f6c6be0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\yoga.dll pool: 0xffff94895f6c6cf0 | file object: 0xffff94895f6c6d70 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c pool: 0xffff94895f6c7010 | file object: 0xffff94895f6c7090 | offsetby: 0x80 \Windows\System32\inetpp.dll pool: 0xffff94895f6c71a0 | file object: 0xffff94895f6c7220 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\976920a9e138a58776e06737ca31b577027d35a5\a4c113226e2b5149354a00b36ef865a2424cf1aa9e9ab4145d62bcd1de45585c pool: 0xffff94895f6c7330 | file object: 0xffff94895f6c73b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\appssynonyms.txt pool: 0xffff94895f6c74c0 | file object: 0xffff94895f6c7540 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c7650 | file object: 0xffff94895f6c76d0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c77e0 | file object: 0xffff94895f6c7860 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\css\package.json pool: 0xffff94895f6c7970 | file object: 0xffff94895f6c79f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c7b00 | file object: 0xffff94895f6c7b80 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f6c7c90 | file object: 0xffff94895f6c7d10 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\314559\4ad6baa887fe4954894f1f2bec8708dd_3 pool: 0xffff94895f6c7e20 | file object: 0xffff94895f6c7ea0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c8140 | file object: 0xffff94895f6c81c0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll pool: 0xffff94895f6c82d0 | file object: 0xffff94895f6c8350 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe\mrt100_app.dll pool: 0xffff94895f6c8460 | file object: 0xffff94895f6c84e0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\clrcompression.dll pool: 0xffff94895f6c85f0 | file object: 0xffff94895f6c8670 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll pool: 0xffff94895f6c8780 | file object: 0xffff94895f6c8800 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c8910 | file object: 0xffff94895f6c8990 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c8aa0 | file object: 0xffff94895f6c8b20 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\314559\d30afff437654212baaffe7015867d9c_3 pool: 0xffff94895f6c8c30 | file object: 0xffff94895f6c8cb0 | offsetby: 0x80 \Windows\System32\mrt100.dll pool: 0xffff94895f6c8dc0 | file object: 0xffff94895f6c8e40 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c90e0 | file object: 0xffff94895f6c9160 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c9270 | file object: 0xffff94895f6c92f0 | offsetby: 0x80 \Windows\TextInput\WindowsInternal.ComposableShell.Experiences.TextInput.dll pool: 0xffff94895f6c9400 | file object: 0xffff94895f6c9480 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6c9590 | file object: 0xffff94895f6c9610 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.NET.Native.Framework.2.2_2.2.27912.0_x64__8wekyb3d8bbwe\SharedLibrary.dll pool: 0xffff94895f6c9720 | file object: 0xffff94895f6c97a0 | offsetby: 0x80 \Windows\System32\en-US\win32spl.dll.mui pool: 0xffff94895f6c98b0 | file object: 0xffff94895f6c9930 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\57163f85f05691457c7efc258578d3d582d74dbf\7cc7d075ef3374455d2684f1bc258dbcc0308778c2efb67ecd761e8368d9f82e pool: 0xffff94895f6c9a40 | file object: 0xffff94895f6c9ac0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\57163f85f05691457c7efc258578d3d582d74dbf\57163f85f05691457c7efc258578d3d582d74dbf.pieceshash pool: 0xffff94895f6c9bd0 | file object: 0xffff94895f6c9c50 | offsetby: 0x80 \$Directory pool: 0xffff94895f6c9d60 | file object: 0xffff94895f6c9de0 | offsetby: 0x80 \Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf pool: 0xffff94895f6ca080 | file object: 0xffff94895f6ca100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ca210 | file object: 0xffff94895f6ca290 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code\Visual Studio Code.lnk pool: 0xffff94895f6ca3a0 | file object: 0xffff94895f6ca420 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2 pool: 0xffff94895f6ca530 | file object: 0xffff94895f6ca5b0 | offsetby: 0x80 \Windows\System32\sysmain.dll pool: 0xffff94895f6ca6c0 | file object: 0xffff94895f6ca740 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\vccorlib140_app.dll pool: 0xffff94895f6ca850 | file object: 0xffff94895f6ca8d0 | offsetby: 0x80 \Windows\System32\WinMetadata\Windows.System.winmd pool: 0xffff94895f6ca9e0 | file object: 0xffff94895f6caa60 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\f455bd2b81c5b3aff628375d20ed9068848033cd\e7c8fa494e68d8566569890572c00e27e1eb328a0269259e3af7fb67e09847b0 pool: 0xffff94895f6cab70 | file object: 0xffff94895f6cabf0 | offsetby: 0x80 \Windows\System32\SyncInfrastructure.dll pool: 0xffff94895f6cad00 | file object: 0xffff94895f6cad80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6cb020 | file object: 0xffff94895f6cb0a0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\OVV37CJY\microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd[1].svg pool: 0xffff94895f6cb1b0 | file object: 0xffff94895f6cb230 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe pool: 0xffff94895f6cb340 | file object: 0xffff94895f6cb3c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6cb4d0 | file object: 0xffff94895f6cb550 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\css\package.nls.json pool: 0xffff94895f6cb660 | file object: 0xffff94895f6cb6e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6cb7f0 | file object: 0xffff94895f6cb870 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6cb980 | file object: 0xffff94895f6cba00 | offsetby: 0x80 \$Directory pool: 0xffff94895f6cbb10 | file object: 0xffff94895f6cbb90 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\ChakraBridge.dll pool: 0xffff94895f6cbca0 | file object: 0xffff94895f6cbd20 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 pool: 0xffff94895f6cbe30 | file object: 0xffff94895f6cbeb0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\microsoft.system.package.metadata\S-1-5-21-3234566417-3121902272-2793192418-1001-MergedResources-2.pri pool: 0xffff94895f6cc150 | file object: 0xffff94895f6cc1d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\css-language-features\package.json pool: 0xffff94895f6cc2e0 | file object: 0xffff94895f6cc360 | offsetby: 0x80 \Windows\System32\mobsync.exe pool: 0xffff94895f6cc470 | file object: 0xffff94895f6cc4f0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f6cc600 | file object: 0xffff94895f6cc680 | offsetby: 0x80 \$Directory pool: 0xffff94895f6cc790 | file object: 0xffff94895f6cc810 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll pool: 0xffff94895f6cc920 | file object: 0xffff94895f6cc9a0 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f6ccab0 | file object: 0xffff94895f6ccb30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ccc40 | file object: 0xffff94895f6cccc0 | offsetby: 0x80 ԁԀ鄑샋狀먔믢꙼ϩāက ԁԀ鄑샋狀먔믢꙼ȁԁԀ鄑샋狀먔믢꙼ϩԁԀ鄑샋狀먔믢꙼ȁ\$ကԁԀ鄑샋狀먔믢꙼ϩကāԀꀀ́Ԁ⓲Ԁ pool: 0xffff94895f6ccdd0 | file object: 0xffff94895f6cce50 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895f6cd0f0 | file object: 0xffff94895f6cd170 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll pool: 0xffff94895f6cd280 | file object: 0xffff94895f6cd300 | offsetby: 0x80 \Windows\System32\en-US\cscui.dll.mui pool: 0xffff94895f6cd410 | file object: 0xffff94895f6cd490 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6cd5a0 | file object: 0xffff94895f6cd620 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6cd730 | file object: 0xffff94895f6cd7b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6cd8c0 | file object: 0xffff94895f6cd940 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895f6cda50 | file object: 0xffff94895f6cdad0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f6cdbe0 | file object: 0xffff94895f6cdc60 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\resources.pri pool: 0xffff94895f6cdd70 | file object: 0xffff94895f6cddf0 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-506A0378.pf pool: 0xffff94895f6ce090 | file object: 0xffff94895f6ce110 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\f01b4d95cf55d32a.customDestinations-ms pool: 0xffff94895f6ce220 | file object: 0xffff94895f6ce2a0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\debug-auto-launch\package.json pool: 0xffff94895f6ce3b0 | file object: 0xffff94895f6ce430 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7e4dca80246863e3.customDestinations-ms pool: 0xffff94895f6ce540 | file object: 0xffff94895f6ce5c0 | offsetby: 0x80 \Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll pool: 0xffff94895f6ce6d0 | file object: 0xffff94895f6ce750 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms pool: 0xffff94895f6ce860 | file object: 0xffff94895f6ce8e0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat.LOG1 pool: 0xffff94895f6ce9f0 | file object: 0xffff94895f6cea70 | offsetby: 0x80 \$Directory pool: 0xffff94895f6ceb80 | file object: 0xffff94895f6cec00 | offsetby: 0x80 \Windows\System32\Windows.UI.Xaml.Resources.rs4.dll pool: 0xffff94895f6ced10 | file object: 0xffff94895f6ced90 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat.LOG2 pool: 0xffff94895f6cf030 | file object: 0xffff94895f6cf0b0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.WinRT.dll pool: 0xffff94895f6cf1c0 | file object: 0xffff94895f6cf240 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat pool: 0xffff94895f6cf350 | file object: 0xffff94895f6cf3d0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms pool: 0xffff94895f6cf4e0 | file object: 0xffff94895f6cf560 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895f6cf670 | file object: 0xffff94895f6cf6f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\css-language-features\package.nls.json pool: 0xffff94895f6cf800 | file object: 0xffff94895f6cf880 | offsetby: 0x80 \$Directory pool: 0xffff94895f6cf990 | file object: 0xffff94895f6cfa10 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f6cfb20 | file object: 0xffff94895f6cfba0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6cfcb0 | file object: 0xffff94895f6cfd30 | offsetby: 0x80 \$Directory pool: 0xffff94895f6cfe40 | file object: 0xffff94895f6cfec0 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f6d0160 | file object: 0xffff94895f6d01e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d02f0 | file object: 0xffff94895f6d0370 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx pool: 0xffff94895f6d0480 | file object: 0xffff94895f6d0500 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms pool: 0xffff94895f6d0610 | file object: 0xffff94895f6d0690 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d07a0 | file object: 0xffff94895f6d0820 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\debug-auto-launch\package.nls.json pool: 0xffff94895f6d0930 | file object: 0xffff94895f6d09b0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\PhoneCommunicationAppService.dll pool: 0xffff94895f6d0ac0 | file object: 0xffff94895f6d0b40 | offsetby: 0x80 \ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019.lnk pool: 0xffff94895f6d0c50 | file object: 0xffff94895f6d0cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d0de0 | file object: 0xffff94895f6d0e60 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms pool: 0xffff94895f6d1100 | file object: 0xffff94895f6d1180 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d1290 | file object: 0xffff94895f6d1310 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\f18460fded109990.customDestinations-ms pool: 0xffff94895f6d1420 | file object: 0xffff94895f6d14a0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk pool: 0xffff94895f6d15b0 | file object: 0xffff94895f6d1630 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3234566417-3121902272-2793192418-1001-MergedResources-1.pri pool: 0xffff94895f6d1740 | file object: 0xffff94895f6d17c0 | offsetby: 0x80 \Windows\System32\cdprt.dll pool: 0xffff94895f6d18d0 | file object: 0xffff94895f6d1950 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe\resources.pri pool: 0xffff94895f6d1a60 | file object: 0xffff94895f6d1ae0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\resources.pri pool: 0xffff94895f6d1bf0 | file object: 0xffff94895f6d1c70 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx pool: 0xffff94895f6d1d80 | file object: 0xffff94895f6d1e00 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d20a0 | file object: 0xffff94895f6d2120 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk pool: 0xffff94895f6d2230 | file object: 0xffff94895f6d22b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.DataCompare.pkgdef pool: 0xffff94895f6d23c0 | file object: 0xffff94895f6d2440 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx pool: 0xffff94895f6d2550 | file object: 0xffff94895f6d25d0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll pool: 0xffff94895f6d26e0 | file object: 0xffff94895f6d2760 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d2870 | file object: 0xffff94895f6d28f0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe\ActivationStore.dat pool: 0xffff94895f6d2a00 | file object: 0xffff94895f6d2a80 | offsetby: 0x80 \Windows\System32\RuntimeBroker.exe pool: 0xffff94895f6d2b90 | file object: 0xffff94895f6d2c10 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\ScreenMirroring.dll pool: 0xffff94895f6d2d20 | file object: 0xffff94895f6d2da0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms pool: 0xffff94895f6d3040 | file object: 0xffff94895f6d30c0 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5ba30e54903374cc.automaticDestinations-ms pool: 0xffff94895f6d31d0 | file object: 0xffff94895f6d3250 | offsetby: 0x80 \Windows\System32\pcwum.dll pool: 0xffff94895f6d3360 | file object: 0xffff94895f6d33e0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6d34f0 | file object: 0xffff94895f6d3570 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 pool: 0xffff94895f6d3680 | file object: 0xffff94895f6d3700 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d3810 | file object: 0xffff94895f6d3890 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d39a0 | file object: 0xffff94895f6d3a20 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2 pool: 0xffff94895f6d3b30 | file object: 0xffff94895f6d3bb0 | offsetby: 0x80 \Windows\System32\Windows.Devices.Bluetooth.dll pool: 0xffff94895f6d3cc0 | file object: 0xffff94895f6d3d40 | offsetby: 0x80 \Windows\System32\MbaeApiPublic.dll pool: 0xffff94895f6d3e50 | file object: 0xffff94895f6d3ed0 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 pool: 0xffff94895f6d4170 | file object: 0xffff94895f6d41f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d4300 | file object: 0xffff94895f6d4380 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\apps.schema pool: 0xffff94895f6d4490 | file object: 0xffff94895f6d4510 | offsetby: 0x80 \Windows\System32\Windows.Networking.dll pool: 0xffff94895f6d4620 | file object: 0xffff94895f6d46a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d47b0 | file object: 0xffff94895f6d4830 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d4940 | file object: 0xffff94895f6d49c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d4ad0 | file object: 0xffff94895f6d4b50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d4c60 | file object: 0xffff94895f6d4ce0 | offsetby: 0x80 \Windows\System32\Windows.Networking.HostName.dll pool: 0xffff94895f6d4df0 | file object: 0xffff94895f6d4e70 | offsetby: 0x80 \Windows\System32\en-US\mitigationscanner.exe.mui pool: 0xffff94895f6d5110 | file object: 0xffff94895f6d5190 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{06de659a-a216-4bfb-b4c7-545a67bfdfd9}\appsconversions.txt pool: 0xffff94895f6d52a0 | file object: 0xffff94895f6d5320 | offsetby: 0x80 \Windows\System32\en-US\winnlsres.dll.mui pool: 0xffff94895f6d5430 | file object: 0xffff94895f6d54b0 | offsetby: 0x80 \Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\YourPhoneControls.dll pool: 0xffff94895f6d55c0 | file object: 0xffff94895f6d5640 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d5750 | file object: 0xffff94895f6d57d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d58e0 | file object: 0xffff94895f6d5960 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d5a70 | file object: 0xffff94895f6d5af0 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData pool: 0xffff94895f6d5c00 | file object: 0xffff94895f6d5c80 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 pool: 0xffff94895f6d5d90 | file object: 0xffff94895f6d5e10 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8389864960aaa3d6b3eaaba482d4f5452ee4c091\8389864960aaa3d6b3eaaba482d4f5452ee4c091.pieceshash pool: 0xffff94895f6d60b0 | file object: 0xffff94895f6d6130 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 pool: 0xffff94895f6d6240 | file object: 0xffff94895f6d62c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d63d0 | file object: 0xffff94895f6d6450 | offsetby: 0x80 \Windows\Prefetch\RUNTIMEBROKER.EXE-DA92980E.pf pool: 0xffff94895f6d6560 | file object: 0xffff94895f6d65e0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.772_none_5f13f94c58ff41d3\TiWorker.exe pool: 0xffff94895f6d66f0 | file object: 0xffff94895f6d6770 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\OpenSSH.Client~~1.0.mum pool: 0xffff94895f6d6880 | file object: 0xffff94895f6d6900 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\OpenSSH.Server~~1.0.mum pool: 0xffff94895f6d6a10 | file object: 0xffff94895f6d6a90 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{118228C0-E02C-4E38-8C1D-92D21936E879}.catalogItem pool: 0xffff94895f6d6ba0 | file object: 0xffff94895f6d6c20 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{3368C32D-3E92-4C5C-8FA9-0D179CFE8EB3}.catalogItem pool: 0xffff94895f6d6d30 | file object: 0xffff94895f6d6db0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895f6d7050 | file object: 0xffff94895f6d70d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\debug-server-ready\package.nls.json pool: 0xffff94895f6d71e0 | file object: 0xffff94895f6d7260 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{34D0DDEA-FED5-4755-8274-CBEBCDD1A04B}.catalogItem pool: 0xffff94895f6d7370 | file object: 0xffff94895f6d73f0 | offsetby: 0x80 \Windows\System32\Windows.Cortana.Desktop.dll pool: 0xffff94895f6d7500 | file object: 0xffff94895f6d7580 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{5A788E81-8A9B-40D6-A6F4-19790FCB450E}.catalogItem pool: 0xffff94895f6d7690 | file object: 0xffff94895f6d7710 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{5B0E9BEC-45A5-43B9-827D-4C7616D33A9C}.catalogItem pool: 0xffff94895f6d7820 | file object: 0xffff94895f6d78a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d79b0 | file object: 0xffff94895f6d7a30 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\OneCoreUAP.OneSync~~1.0.mum pool: 0xffff94895f6d7b40 | file object: 0xffff94895f6d7bc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Common.dll pool: 0xffff94895f6d7cd0 | file object: 0xffff94895f6d7d50 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{71A64C58-29D9-4BA7-A120-B302A7A3A9CE}.catalogItem pool: 0xffff94895f6d7e60 | file object: 0xffff94895f6d7ee0 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Network.Irda~~1.0.mum pool: 0xffff94895f6d8180 | file object: 0xffff94895f6d8200 | offsetby: 0x80 \Windows\System32\en-US\inetpp.dll.mui pool: 0xffff94895f6d8310 | file object: 0xffff94895f6d8390 | offsetby: 0x80 \Windows\System32\smartscreenps.dll pool: 0xffff94895f6d84a0 | file object: 0xffff94895f6d8520 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\debug-server-ready\package.json pool: 0xffff94895f6d8630 | file object: 0xffff94895f6d86b0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.772_none_02f55dc8a0a1d09d\TiWorker.exe pool: 0xffff94895f6d87c0 | file object: 0xffff94895f6d8840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d8950 | file object: 0xffff94895f6d89d0 | offsetby: 0x80 \Users\User\.vscode\extensions\ms-vscode-remote.remote-wsl-0.44.2\package.json pool: 0xffff94895f6d8ae0 | file object: 0xffff94895f6d8b60 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895f6d8c70 | file object: 0xffff94895f6d8cf0 | offsetby: 0x80 \Windows\System32\DictationManager.dll pool: 0xffff94895f6d8e00 | file object: 0xffff94895f6d8e80 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{061B7EB2-ACBE-47F3-B729-D8EBD04F9E8C}.catalogItem pool: 0xffff94895f6d9120 | file object: 0xffff94895f6d91a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d92b0 | file object: 0xffff94895f6d9330 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{0BD15D0E-8D14-436A-8B25-84EB15ED74CA}.catalogItem pool: 0xffff94895f6d9440 | file object: 0xffff94895f6d94c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d95d0 | file object: 0xffff94895f6d9650 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d9760 | file object: 0xffff94895f6d97e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6d98f0 | file object: 0xffff94895f6d9970 | offsetby: 0x80 \$Directory pool: 0xffff94895f6d9a80 | file object: 0xffff94895f6d9b00 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6d9c10 | file object: 0xffff94895f6d9c90 | offsetby: 0x80 \Windows\CSC pool: 0xffff94895f6d9da0 | file object: 0xffff94895f6d9e20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6da0c0 | file object: 0xffff94895f6da140 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6da250 | file object: 0xffff94895f6da2d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6da3e0 | file object: 0xffff94895f6da460 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6da570 | file object: 0xffff94895f6da5f0 | offsetby: 0x80 \Windows\CSC\v2.0.6 pool: 0xffff94895f6da700 | file object: 0xffff94895f6da780 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6da890 | file object: 0xffff94895f6da910 | offsetby: 0x80 \Windows\CSC\v2.0.6\temp pool: 0xffff94895f6daa20 | file object: 0xffff94895f6daaa0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dabb0 | file object: 0xffff94895f6dac30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dad40 | file object: 0xffff94895f6dadc0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6db060 | file object: 0xffff94895f6db0e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6db1f0 | file object: 0xffff94895f6db270 | offsetby: 0x80 \$Directory pool: 0xffff94895f6db380 | file object: 0xffff94895f6db400 | offsetby: 0x80 \Windows\CSC\v2.0.6\pq pool: 0xffff94895f6db510 | file object: 0xffff94895f6db590 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6db6a0 | file object: 0xffff94895f6db720 | offsetby: 0x80 \$Directory pool: 0xffff94895f6db830 | file object: 0xffff94895f6db8b0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8389864960aaa3d6b3eaaba482d4f5452ee4c091\ff3e2a0104629fa65e6beb09d707b1e43cc281fd0b799c7ff572413a47444fef pool: 0xffff94895f6db9c0 | file object: 0xffff94895f6dba40 | offsetby: 0x80 \Windows\Prefetch\WLRMDR.EXE-C2B47318.pf pool: 0xffff94895f6dbb50 | file object: 0xffff94895f6dbbd0 | offsetby: 0x80 \Windows\System32\dmiso8601utils.dll pool: 0xffff94895f6dbce0 | file object: 0xffff94895f6dbd60 | offsetby: 0x80 \Users\User\.vscode\extensions\ms-vscode-remote.remote-wsl-0.44.2\package.nls.json pool: 0xffff94895f6dbe70 | file object: 0xffff94895f6dbef0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dc000 | file object: 0xffff94895f6dc080 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dc190 | file object: 0xffff94895f6dc210 | offsetby: 0x80 \Windows\System32\dcntel.dll pool: 0xffff94895f6dc320 | file object: 0xffff94895f6dc3a0 | offsetby: 0x80 \Windows\System32\configmanager2.dll pool: 0xffff94895f6dc4b0 | file object: 0xffff94895f6dc530 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dc640 | file object: 0xffff94895f6dc6c0 | offsetby: 0x80 \Windows\System32\mssph.dll pool: 0xffff94895f6dc7d0 | file object: 0xffff94895f6dc850 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6dc960 | file object: 0xffff94895f6dc9e0 | offsetby: 0x80 \Windows\System32\dmoleaututils.dll pool: 0xffff94895f6dcaf0 | file object: 0xffff94895f6dcb70 | offsetby: 0x80 \Windows\System32\WinRtTracing.dll pool: 0xffff94895f6dcc80 | file object: 0xffff94895f6dcd00 | offsetby: 0x80 \Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config pool: 0xffff94895f6dce10 | file object: 0xffff94895f6dce90 | offsetby: 0x80 \Windows\System32\enterpriseresourcemanager.dll pool: 0xffff94895f6dd130 | file object: 0xffff94895f6dd1b0 | offsetby: 0x80 \Windows\System32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll pool: 0xffff94895f6dd2c0 | file object: 0xffff94895f6dd340 | offsetby: 0x80 \Windows\System32\vcruntime140_clr0400.dll pool: 0xffff94895f6dd450 | file object: 0xffff94895f6dd4d0 | offsetby: 0x80 \Windows\System32\ucrtbase_clr0400.dll pool: 0xffff94895f6dd5e0 | file object: 0xffff94895f6dd660 | offsetby: 0x80 \Windows\System32\smartscreen.exe pool: 0xffff94895f6dd770 | file object: 0xffff94895f6dd7f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6dd900 | file object: 0xffff94895f6dd980 | offsetby: 0x80 \Windows\System32\smartscreen.exe pool: 0xffff94895f6dda90 | file object: 0xffff94895f6ddb10 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\608b1a4f3a44025433437f6d8c52edc2\System.Windows.Forms.ni.dll.aux pool: 0xffff94895f6ddc20 | file object: 0xffff94895f6ddca0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f97adcda88ac3704f93ae736f5e694ca\System.Runtime.Serialization.ni.dll.aux pool: 0xffff94895f6dddb0 | file object: 0xffff94895f6dde30 | offsetby: 0x80 \Windows\System32\SecurityHealthSystray.exe pool: 0xffff94895f6de0d0 | file object: 0xffff94895f6de150 | offsetby: 0x80 \Windows\System32\SecurityHealthSystray.exe pool: 0xffff94895f6de260 | file object: 0xffff94895f6de2e0 | offsetby: 0x80 \Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-41AD6DE1.pf pool: 0xffff94895f6de3f0 | file object: 0xffff94895f6de470 | offsetby: 0x80 \Windows\System32\SecurityHealthService.exe pool: 0xffff94895f6de580 | file object: 0xffff94895f6de600 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6de710 | file object: 0xffff94895f6de790 | offsetby: 0x80 \Windows\System32\SecurityHealthProxyStub.dll pool: 0xffff94895f6de8a0 | file object: 0xffff94895f6de920 | offsetby: 0x80 \$Directory pool: 0xffff94895f6dea30 | file object: 0xffff94895f6deab0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6debc0 | file object: 0xffff94895f6dec40 | offsetby: 0x80 \Windows\System32\SecurityHealthSSO.dll pool: 0xffff94895f6ded50 | file object: 0xffff94895f6dedd0 | offsetby: 0x80 \Windows\System32\en-US\securityhealthsso.dll.mui pool: 0xffff94895f6df070 | file object: 0xffff94895f6df0f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6df200 | file object: 0xffff94895f6df280 | offsetby: 0x80 \Windows\System32\SecurityHealthSSO.dll pool: 0xffff94895f6df390 | file object: 0xffff94895f6df410 | offsetby: 0x80 \Windows\Prefetch\SMARTSCREEN.EXE-9B5E4173.pf pool: 0xffff94895f6df520 | file object: 0xffff94895f6df5a0 | offsetby: 0x80 \Windows\Prefetch\SECURITYHEALTHSERVICE.EXE-EE3BC4CB.pf pool: 0xffff94895f6df6b0 | file object: 0xffff94895f6df730 | offsetby: 0x80 \Windows\System32\SecurityHealthProxyStub.dll pool: 0xffff94895f6df840 | file object: 0xffff94895f6df8c0 | offsetby: 0x80 \Windows\System32\SecurityCenterBrokerPS.dll pool: 0xffff94895f6df9d0 | file object: 0xffff94895f6dfa50 | offsetby: 0x80 \Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll pool: 0xffff94895f6dfb60 | file object: 0xffff94895f6dfbe0 | offsetby: 0x80 \Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll pool: 0xffff94895f6dfcf0 | file object: 0xffff94895f6dfd70 | offsetby: 0x80 \Windows\System32\VBoxTray.exe pool: 0xffff94895f6e0010 | file object: 0xffff94895f6e0090 | offsetby: 0x80 \Windows\SysWOW64\msIso.dll pool: 0xffff94895f6e01a0 | file object: 0xffff94895f6e0220 | offsetby: 0x80 \Windows\System32\EAMProgressHandler.dll pool: 0xffff94895f6e0330 | file object: 0xffff94895f6e03b0 | offsetby: 0x80 \Windows\System32\en-US\vaultsvc.dll.mui pool: 0xffff94895f6e04c0 | file object: 0xffff94895f6e0540 | offsetby: 0x80 \Windows\Prefetch\VBOXTRAY.EXE-1D286C83.pf pool: 0xffff94895f6e0650 | file object: 0xffff94895f6e06d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\User\Default\AppCache\2A9CWP4O\1\appcache[1].man pool: 0xffff94895f6e07e0 | file object: 0xffff94895f6e0860 | offsetby: 0x80 \Windows\System32\ngclocal.dll pool: 0xffff94895f6e0970 | file object: 0xffff94895f6e09f0 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f6e0b00 | file object: 0xffff94895f6e0b80 | offsetby: 0x80 \Windows\System32\en-US\vaultsvc.dll.mui pool: 0xffff94895f6e0c90 | file object: 0xffff94895f6e0d10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e0e20 | file object: 0xffff94895f6e0ea0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e1140 | file object: 0xffff94895f6e11c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6e12d0 | file object: 0xffff94895f6e1350 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll pool: 0xffff94895f6e1460 | file object: 0xffff94895f6e14e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e15f0 | file object: 0xffff94895f6e1670 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e1780 | file object: 0xffff94895f6e1800 | offsetby: 0x80 \ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\Policy.vpol pool: 0xffff94895f6e1910 | file object: 0xffff94895f6e1990 | offsetby: 0x80 \$Directory pool: 0xffff94895f6e1aa0 | file object: 0xffff94895f6e1b20 | offsetby: 0x80 \Windows\System32\vaultsvc.dll pool: 0xffff94895f6e1c30 | file object: 0xffff94895f6e1cb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e1dc0 | file object: 0xffff94895f6e1e40 | offsetby: 0x80 \ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch pool: 0xffff94895f6e20e0 | file object: 0xffff94895f6e2160 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MpClient.dll pool: 0xffff94895f6e2270 | file object: 0xffff94895f6e22f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e2400 | file object: 0xffff94895f6e2480 | offsetby: 0x80 \$Directory pool: 0xffff94895f6e2590 | file object: 0xffff94895f6e2610 | offsetby: 0x80 \ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch pool: 0xffff94895f6e2720 | file object: 0xffff94895f6e27a0 | offsetby: 0x80 \ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch pool: 0xffff94895f6e28b0 | file object: 0xffff94895f6e2930 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e2a40 | file object: 0xffff94895f6e2ac0 | offsetby: 0x80 \Windows\System32\en-US\user32.dll.mui pool: 0xffff94895f6e2bd0 | file object: 0xffff94895f6e2c50 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll.aux pool: 0xffff94895f6e2d60 | file object: 0xffff94895f6e2de0 | offsetby: 0x80 \Windows pool: 0xffff94895f6e3080 | file object: 0xffff94895f6e3100 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e3210 | file object: 0xffff94895f6e3290 | offsetby: 0x80 \Windows\SysWOW64\version.dll pool: 0xffff94895f6e33a0 | file object: 0xffff94895f6e3420 | offsetby: 0x80 \Windows\SysWOW64\wininet.dll pool: 0xffff94895f6e3530 | file object: 0xffff94895f6e35b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e36c0 | file object: 0xffff94895f6e3740 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\User\Default\AppCache\2A9CWP4O\2\appcache[1].man pool: 0xffff94895f6e3850 | file object: 0xffff94895f6e38d0 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.18362.752_none_dff99c4455d83c3a.manifest pool: 0xffff94895f6e39e0 | file object: 0xffff94895f6e3a60 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx pool: 0xffff94895f6e3b70 | file object: 0xffff94895f6e3bf0 | offsetby: 0x80 \Windows\SysWOW64\userenv.dll pool: 0xffff94895f6e3d00 | file object: 0xffff94895f6e3d80 | offsetby: 0x80 \Windows\SysWOW64 pool: 0xffff94895f6e4020 | file object: 0xffff94895f6e40a0 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.752_en-us_87e0dc7e878b79e8.manifest pool: 0xffff94895f6e41b0 | file object: 0xffff94895f6e4230 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e4340 | file object: 0xffff94895f6e43c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e44d0 | file object: 0xffff94895f6e4550 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{7216C73B-1BE8-4049-9416-B8BEC439FBF3}.catalogItem pool: 0xffff94895f6e4660 | file object: 0xffff94895f6e46e0 | offsetby: 0x80 \Windows\SysWOW64\wtsapi32.dll pool: 0xffff94895f6e47f0 | file object: 0xffff94895f6e4870 | offsetby: 0x80 \Windows\SysWOW64\uxtheme.dll pool: 0xffff94895f6e4980 | file object: 0xffff94895f6e4a00 | offsetby: 0x80 \Windows\SysWOW64\rsaenh.dll pool: 0xffff94895f6e4b10 | file object: 0xffff94895f6e4b90 | offsetby: 0x80 \Windows\System32\en-US\kernel32.dll.mui pool: 0xffff94895f6e4ca0 | file object: 0xffff94895f6e4d20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e4e30 | file object: 0xffff94895f6e4eb0 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_71d593995ae547fb.manifest pool: 0xffff94895f6e5150 | file object: 0xffff94895f6e51d0 | offsetby: 0x80 \Windows\SysWOW64\sxs.dll pool: 0xffff94895f6e52e0 | file object: 0xffff94895f6e5360 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e5470 | file object: 0xffff94895f6e54f0 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.18362.752_none_8970ed77b4e2564e.manifest pool: 0xffff94895f6e5600 | file object: 0xffff94895f6e5680 | offsetby: 0x80 \$Directory pool: 0xffff94895f6e5790 | file object: 0xffff94895f6e5810 | offsetby: 0x80 \Windows\Prefetch\TASKHOSTW.EXE-3E0B74C8.pf pool: 0xffff94895f6e5920 | file object: 0xffff94895f6e59a0 | offsetby: 0x80 \Windows\Prefetch\ONEDRIVE.EXE-AC60F278.pf pool: 0xffff94895f6e5ab0 | file object: 0xffff94895f6e5b30 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ucrtbase.dll pool: 0xffff94895f6e5c40 | file object: 0xffff94895f6e5cc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6e5dd0 | file object: 0xffff94895f6e5e50 | offsetby: 0x80 \Windows\WinSxS\Manifests\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_5f58dfa9822159e0.manifest pool: 0xffff94895f6e60f0 | file object: 0xffff94895f6e6170 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\RemoteAccess.dll pool: 0xffff94895f6e6280 | file object: 0xffff94895f6e6300 | offsetby: 0x80 \Windows\SysWOW64\wsock32.dll pool: 0xffff94895f6e6410 | file object: 0xffff94895f6e6490 | offsetby: 0x80 \Windows\SysWOW64\pdh.dll pool: 0xffff94895f6e65a0 | file object: 0xffff94895f6e6620 | offsetby: 0x80 \Windows\SysWOW64\ntmarta.dll pool: 0xffff94895f6e6730 | file object: 0xffff94895f6e67b0 | offsetby: 0x80 \Windows\SysWOW64\dwmapi.dll pool: 0xffff94895f6e68c0 | file object: 0xffff94895f6e6940 | offsetby: 0x80 \Windows\SysWOW64\imm32.dll pool: 0xffff94895f6e6a50 | file object: 0xffff94895f6e6ad0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\LogUploader.dll pool: 0xffff94895f6e6be0 | file object: 0xffff94895f6e6c60 | offsetby: 0x80 \Windows\SysWOW64\version.dll pool: 0xffff94895f6e6d70 | file object: 0xffff94895f6e6df0 | offsetby: 0x80 \Windows\SysWOW64\ncrypt.dll pool: 0xffff94895f6e7090 | file object: 0xffff94895f6e7110 | offsetby: 0x80 \Windows\SysWOW64\wer.dll pool: 0xffff94895f6e7220 | file object: 0xffff94895f6e72a0 | offsetby: 0x80 \Windows\SysWOW64\xmllite.dll pool: 0xffff94895f6e73b0 | file object: 0xffff94895f6e7430 | offsetby: 0x80 \Windows\SysWOW64\dhcpcsvc.dll pool: 0xffff94895f6e7540 | file object: 0xffff94895f6e75c0 | offsetby: 0x80 \Windows\SysWOW64\ktmw32.dll pool: 0xffff94895f6e76d0 | file object: 0xffff94895f6e7750 | offsetby: 0x80 \Windows\SysWOW64\loadperf.dll pool: 0xffff94895f6e7860 | file object: 0xffff94895f6e78e0 | offsetby: 0x80 \Windows\SysWOW64\dhcpcsvc6.dll pool: 0xffff94895f6e79f0 | file object: 0xffff94895f6e7a70 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ETWlog.dll pool: 0xffff94895f6e7b80 | file object: 0xffff94895f6e7c00 | offsetby: 0x80 \Windows\SysWOW64\secur32.dll pool: 0xffff94895f6e7d10 | file object: 0xffff94895f6e7d90 | offsetby: 0x80 \Windows\SysWOW64\propsys.dll pool: 0xffff94895f6e8030 | file object: 0xffff94895f6e80b0 | offsetby: 0x80 \Windows\SysWOW64\credui.dll pool: 0xffff94895f6e81c0 | file object: 0xffff94895f6e8240 | offsetby: 0x80 \Windows\SysWOW64\wtsapi32.dll pool: 0xffff94895f6e8350 | file object: 0xffff94895f6e83d0 | offsetby: 0x80 \Windows\SysWOW64\Faultrep.dll pool: 0xffff94895f6e84e0 | file object: 0xffff94895f6e8560 | offsetby: 0x80 \Windows\SysWOW64\wininet.dll pool: 0xffff94895f6e8670 | file object: 0xffff94895f6e86f0 | offsetby: 0x80 \Windows\SysWOW64\urlmon.dll pool: 0xffff94895f6e8800 | file object: 0xffff94895f6e8880 | offsetby: 0x80 \Windows\SysWOW64\userenv.dll pool: 0xffff94895f6e8990 | file object: 0xffff94895f6e8a10 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSyncClient.dll pool: 0xffff94895f6e8b20 | file object: 0xffff94895f6e8ba0 | offsetby: 0x80 \Windows\SysWOW64\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll pool: 0xffff94895f6e8cb0 | file object: 0xffff94895f6e8d30 | offsetby: 0x80 \Windows\SysWOW64\IPHLPAPI.DLL pool: 0xffff94895f6e8e40 | file object: 0xffff94895f6e8ec0 | offsetby: 0x80 \Windows\SysWOW64\winhttp.dll pool: 0xffff94895f6e9160 | file object: 0xffff94895f6e91e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSyncClient.dll pool: 0xffff94895f6e92f0 | file object: 0xffff94895f6e9370 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\vcruntime140.dll pool: 0xffff94895f6e9480 | file object: 0xffff94895f6e9500 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2020-06-04.0621.3812.1.aodl pool: 0xffff94895f6e9610 | file object: 0xffff94895f6e9690 | offsetby: 0x80 \Windows\SysWOW64\dhcpcsvc.dll pool: 0xffff94895f6e97a0 | file object: 0xffff94895f6e9820 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e9930 | file object: 0xffff94895f6e99b0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{9931410D-D7D2-4079-A00B-9221551C09CB}.catalogItem pool: 0xffff94895f6e9ac0 | file object: 0xffff94895f6e9b40 | offsetby: 0x80 \Windows\SysWOW64\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll pool: 0xffff94895f6e9c50 | file object: 0xffff94895f6e9cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6e9de0 | file object: 0xffff94895f6e9e60 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012 pool: 0xffff94895f6ea100 | file object: 0xffff94895f6ea180 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\LoggingPlatform.dll pool: 0xffff94895f6ea290 | file object: 0xffff94895f6ea310 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ea420 | file object: 0xffff94895f6ea4a0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ucrtbase.dll pool: 0xffff94895f6ea5b0 | file object: 0xffff94895f6ea630 | offsetby: 0x80 \Windows\SysWOW64\rsaenh.dll pool: 0xffff94895f6ea740 | file object: 0xffff94895f6ea7c0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\OneDriveTelemetryStable.dll pool: 0xffff94895f6ea8d0 | file object: 0xffff94895f6ea950 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6eaa60 | file object: 0xffff94895f6eaae0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_5f58dfa9822159e0 pool: 0xffff94895f6eabf0 | file object: 0xffff94895f6eac70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ead80 | file object: 0xffff94895f6eae00 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{C843AAF5-B98C-44D0-B406-B7BF46292A8A}.catalogItem pool: 0xffff94895f6eb0a0 | file object: 0xffff94895f6eb120 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{ADB50B48-F7B0-48CC-9855-ACD97A14B907}.catalogItem pool: 0xffff94895f6eb230 | file object: 0xffff94895f6eb2b0 | offsetby: 0x80 \Windows\SysWOW64\IPHLPAPI.DLL pool: 0xffff94895f6eb3c0 | file object: 0xffff94895f6eb440 | offsetby: 0x80 \Windows\System32\LanguageComponentsInstaller.dll pool: 0xffff94895f6eb550 | file object: 0xffff94895f6eb5d0 | offsetby: 0x80 \Windows\SysWOW64\tzres.dll pool: 0xffff94895f6eb6e0 | file object: 0xffff94895f6eb760 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\msvcp140.dll pool: 0xffff94895f6eb870 | file object: 0xffff94895f6eb8f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6eba00 | file object: 0xffff94895f6eba80 | offsetby: 0x80 \ProgramData\Microsoft\Windows\LfSvc\Geofence\S-1-5-18_NonPackagedApp\Geofence.dat pool: 0xffff94895f6ebb90 | file object: 0xffff94895f6ebc10 | offsetby: 0x80 \Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll pool: 0xffff94895f6ebd20 | file object: 0xffff94895f6ebda0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ec040 | file object: 0xffff94895f6ec0c0 | offsetby: 0x80 \Windows\SysWOW64\uxtheme.dll pool: 0xffff94895f6ec1d0 | file object: 0xffff94895f6ec250 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6ec360 | file object: 0xffff94895f6ec3e0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012\comctl32.dll pool: 0xffff94895f6ec4f0 | file object: 0xffff94895f6ec570 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Telemetry.dll pool: 0xffff94895f6ec680 | file object: 0xffff94895f6ec700 | offsetby: 0x80 \Windows\SysWOW64\secur32.dll pool: 0xffff94895f6ec810 | file object: 0xffff94895f6ec890 | offsetby: 0x80 \Windows\SysWOW64\urlmon.dll pool: 0xffff94895f6ec9a0 | file object: 0xffff94895f6eca20 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\ae3b4dc05d0347fcbe5087af4fef611d7600b315\ae3b4dc05d0347fcbe5087af4fef611d7600b315.pieceshash pool: 0xffff94895f6ecb30 | file object: 0xffff94895f6ecbb0 | offsetby: 0x80 \Windows\SysWOW64\dwmapi.dll pool: 0xffff94895f6eccc0 | file object: 0xffff94895f6ecd40 | offsetby: 0x80 \Windows\SysWOW64\wer.dll pool: 0xffff94895f6ece50 | file object: 0xffff94895f6eced0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\UpdateRingSettings.dll pool: 0xffff94895f6ed170 | file object: 0xffff94895f6ed1f0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetry-dll-ramp-value.txt pool: 0xffff94895f6ed300 | file object: 0xffff94895f6ed380 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetryCache.otc.session pool: 0xffff94895f6ed490 | file object: 0xffff94895f6ed510 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSyncSessions.dll pool: 0xffff94895f6ed620 | file object: 0xffff94895f6ed6a0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\UpdateRingSettings.dll pool: 0xffff94895f6ed7b0 | file object: 0xffff94895f6ed830 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_5f58dfa9822159e0\GdiPlus.dll pool: 0xffff94895f6ed940 | file object: 0xffff94895f6ed9c0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012\comctl32.dll pool: 0xffff94895f6edad0 | file object: 0xffff94895f6edb50 | offsetby: 0x80 \Windows\SysWOW64\xmllite.dll pool: 0xffff94895f6edc60 | file object: 0xffff94895f6edce0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_5f58dfa9822159e0\GdiPlus.dll pool: 0xffff94895f6eddf0 | file object: 0xffff94895f6ede70 | offsetby: 0x80 \Windows\SysWOW64\winhttp.dll pool: 0xffff94895f6ee110 | file object: 0xffff94895f6ee190 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\LoggingPlatform.dll pool: 0xffff94895f6ee2a0 | file object: 0xffff94895f6ee320 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ETWlog.dll pool: 0xffff94895f6ee430 | file object: 0xffff94895f6ee4b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\msvcp140.dll pool: 0xffff94895f6ee5c0 | file object: 0xffff94895f6ee640 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\RemoteAccess.dll pool: 0xffff94895f6ee750 | file object: 0xffff94895f6ee7d0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\vcruntime140.dll pool: 0xffff94895f6ee8e0 | file object: 0xffff94895f6ee960 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\SyncEngine.dll pool: 0xffff94895f6eea70 | file object: 0xffff94895f6eeaf0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6eec00 | file object: 0xffff94895f6eec80 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\DeviceHealthSummaryConfiguration.ini pool: 0xffff94895f6eed90 | file object: 0xffff94895f6eee10 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\LogUploader.dll pool: 0xffff94895f6ef0b0 | file object: 0xffff94895f6ef130 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSyncViews.dll pool: 0xffff94895f6ef240 | file object: 0xffff94895f6ef2c0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ruby\package.nls.json pool: 0xffff94895f6ef3d0 | file object: 0xffff94895f6ef450 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\DeviceHealth.json pool: 0xffff94895f6ef560 | file object: 0xffff94895f6ef5e0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{F6F95966-0C54-4898-99F8-7DF18C6C1DDD}.catalogItem pool: 0xffff94895f6ef6f0 | file object: 0xffff94895f6ef770 | offsetby: 0x80 \Windows\SysWOW64\CoreUIComponents.dll pool: 0xffff94895f6ef880 | file object: 0xffff94895f6ef900 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\adal.dll pool: 0xffff94895f6efa10 | file object: 0xffff94895f6efa90 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Gui.dll pool: 0xffff94895f6efba0 | file object: 0xffff94895f6efc20 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5WinExtras.dll pool: 0xffff94895f6efd30 | file object: 0xffff94895f6efdb0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{E8901E86-1636-42CE-AD5E-2206FB3D8078}.catalogItem pool: 0xffff94895f6f0050 | file object: 0xffff94895f6f00d0 | offsetby: 0x80 \Windows\SysWOW64\credui.dll pool: 0xffff94895f6f01e0 | file object: 0xffff94895f6f0260 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Quick.dll pool: 0xffff94895f6f0370 | file object: 0xffff94895f6f03f0 | offsetby: 0x80 \Windows\SysWOW64\CoreMessaging.dll pool: 0xffff94895f6f0500 | file object: 0xffff94895f6f0580 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Core.dll pool: 0xffff94895f6f0690 | file object: 0xffff94895f6f0710 | offsetby: 0x80 \Windows\System32\ngctasks.dll pool: 0xffff94895f6f0820 | file object: 0xffff94895f6f08a0 | offsetby: 0x80 \Windows\SysWOW64\wsock32.dll pool: 0xffff94895f6f09b0 | file object: 0xffff94895f6f0a30 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\History\desktop.ini pool: 0xffff94895f6f0b40 | file object: 0xffff94895f6f0bc0 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 pool: 0xffff94895f6f0cd0 | file object: 0xffff94895f6f0d50 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\settings\Personal\global.ini pool: 0xffff94895f6f0e60 | file object: 0xffff94895f6f0ee0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings.ini pool: 0xffff94895f6f1180 | file object: 0xffff94895f6f1200 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\WnsClientApi.dll pool: 0xffff94895f6f1310 | file object: 0xffff94895f6f1390 | offsetby: 0x80 \Windows\SysWOW64\ncrypt.dll pool: 0xffff94895f6f14a0 | file object: 0xffff94895f6f1520 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f1630 | file object: 0xffff94895f6f16b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Qml.dll pool: 0xffff94895f6f17c0 | file object: 0xffff94895f6f1840 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Widgets.dll pool: 0xffff94895f6f1950 | file object: 0xffff94895f6f19d0 | offsetby: 0x80 \Windows\SysWOW64\iertutil.dll pool: 0xffff94895f6f1ae0 | file object: 0xffff94895f6f1b60 | offsetby: 0x80 \Windows\SysWOW64\Windows.Web.dll pool: 0xffff94895f6f1c70 | file object: 0xffff94895f6f1cf0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\settings\Personal\assertInformation.ini pool: 0xffff94895f6f1e00 | file object: 0xffff94895f6f1e80 | offsetby: 0x80 \Windows\SysWOW64\propsys.dll pool: 0xffff94895f6f2120 | file object: 0xffff94895f6f21a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f22b0 | file object: 0xffff94895f6f2330 | offsetby: 0x80 \Windows\SysWOW64\Faultrep.dll pool: 0xffff94895f6f2440 | file object: 0xffff94895f6f24c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f25d0 | file object: 0xffff94895f6f2650 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f2760 | file object: 0xffff94895f6f27e0 | offsetby: 0x80 \Windows\SysWOW64\winmmbase.dll pool: 0xffff94895f6f28f0 | file object: 0xffff94895f6f2970 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\ssleay32.dll pool: 0xffff94895f6f2a80 | file object: 0xffff94895f6f2b00 | offsetby: 0x80 饪ί̜庰ô鐄 ÀŒ(ǿ؁ԀP覵㣻萙쯂汜洣W湷ˀ蝤ǿāԀ©ȁԀ ȡ©ȁༀ©ȁༀ؁ pool: 0xffff94895f6f2c10 | file object: 0xffff94895f6f2c90 | offsetby: 0x80 \Windows\SysWOW64\srvcli.dll pool: 0xffff94895f6f2da0 | file object: 0xffff94895f6f2e20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f6f30c0 | file object: 0xffff94895f6f3140 | offsetby: 0x80 \Windows\SysWOW64\mpr.dll pool: 0xffff94895f6f3250 | file object: 0xffff94895f6f32d0 | offsetby: 0x80 \Windows\SysWOW64\netutils.dll pool: 0xffff94895f6f33e0 | file object: 0xffff94895f6f3460 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6f3570 | file object: 0xffff94895f6f35f0 | offsetby: 0x80 \Windows\servicing\InboxFodMetadataCache\metadata\Print.EnterpriseCloudPrint~~1.0.mum pool: 0xffff94895f6f3700 | file object: 0xffff94895f6f3780 | offsetby: 0x80 \Windows\SysWOW64\dbghelp.dll pool: 0xffff94895f6f3890 | file object: 0xffff94895f6f3910 | offsetby: 0x80 \Windows\SysWOW64\wscapi.dll pool: 0xffff94895f6f3a20 | file object: 0xffff94895f6f3aa0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSync.Resources.dll pool: 0xffff94895f6f3bb0 | file object: 0xffff94895f6f3c30 | offsetby: 0x80 \Windows\SysWOW64\fltLib.dll pool: 0xffff94895f6f3d40 | file object: 0xffff94895f6f3dc0 | offsetby: 0x80 \Windows\SysWOW64\winmm.dll pool: 0xffff94895f6f4060 | file object: 0xffff94895f6f40e0 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 pool: 0xffff94895f6f41f0 | file object: 0xffff94895f6f4270 | offsetby: 0x80 \Windows\SysWOW64\netapi32.dll pool: 0xffff94895f6f4380 | file object: 0xffff94895f6f4400 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\TraceCurrent.0329.0008.etl pool: 0xffff94895f6f4510 | file object: 0xffff94895f6f4590 | offsetby: 0x80 \Windows\SysWOW64\vaultcli.dll pool: 0xffff94895f6f46a0 | file object: 0xffff94895f6f4720 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\Qt5Network.dll pool: 0xffff94895f6f4830 | file object: 0xffff94895f6f48b0 | offsetby: 0x80 \Windows\SysWOW64\dbgcore.dll pool: 0xffff94895f6f49c0 | file object: 0xffff94895f6f4a40 | offsetby: 0x80 \$ConvertToNonresident pool: 0xffff94895f6f4b50 | file object: 0xffff94895f6f4bd0 | offsetby: 0x80 \Windows\SysWOW64\cldapi.dll pool: 0xffff94895f6f4ce0 | file object: 0xffff94895f6f4d60 | offsetby: 0x80 \Windows\SysWOW64\ntasn1.dll pool: 0xffff94895f6f4e70 | file object: 0xffff94895f6f4ef0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSyncFALWB.dll pool: 0xffff94895f6f5000 | file object: 0xffff94895f6f5080 | offsetby: 0x80 \Windows\SysWOW64\dnsapi.dll pool: 0xffff94895f6f5190 | file object: 0xffff94895f6f5210 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\libeay32.dll pool: 0xffff94895f6f5320 | file object: 0xffff94895f6f53a0 | offsetby: 0x80 \Windows\SysWOW64\atlthunk.dll pool: 0xffff94895f6f54b0 | file object: 0xffff94895f6f5530 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f5640 | file object: 0xffff94895f6f56c0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres pool: 0xffff94895f6f57d0 | file object: 0xffff94895f6f5850 | offsetby: 0x80 \Windows\SysWOW64\mswsock.dll pool: 0xffff94895f6f5960 | file object: 0xffff94895f6f59e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f6f5af0 | file object: 0xffff94895f6f5b70 | offsetby: 0x80 \Windows\System32\UNP\UpdateNotificationHelpers.dll pool: 0xffff94895f6f5c80 | file object: 0xffff94895f6f5d00 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\en\FileSync.LocalizedResources.dll.mui pool: 0xffff94895f6f5e10 | file object: 0xffff94895f6f5e90 | offsetby: 0x80 \Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll pool: 0xffff94895f6f6130 | file object: 0xffff94895f6f61b0 | offsetby: 0x80 \Windows\SysWOW64\mlang.dll pool: 0xffff94895f6f62c0 | file object: 0xffff94895f6f6340 | offsetby: 0x80 \$Directory pool: 0xffff94895f6f6450 | file object: 0xffff94895f6f64d0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\ae3b4dc05d0347fcbe5087af4fef611d7600b315\e43f8a4f3ded683a3794566678c4b6170a2c2ef9c025dcb353928086fe9cc63b pool: 0xffff94895f6f65e0 | file object: 0xffff94895f6f6660 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSync.LocalizedResources.dll pool: 0xffff94895f6f6770 | file object: 0xffff94895f6f67f0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\platforms\qwindows.dll pool: 0xffff94895f6f6900 | file object: 0xffff94895f6f6980 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json pool: 0xffff94895f6f6a90 | file object: 0xffff94895f6f6b10 | offsetby: 0x80 謀舎￿謀舎￿㩐邻舎￿쇠謽舎￿쫰謽舎￿쫰謽舎￿Ƞ預迡舎￿r pool: 0xffff94895f6f6c20 | file object: 0xffff94895f6f6ca0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f6f6db0 | file object: 0xffff94895f6f6e30 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\settings\Personal\ECSConfig.json pool: 0xffff94895f858680 | file object: 0xffff94895f8586e0 | offsetby: 0x60 \Windows\System32\drivers\condrv.sys pool: 0xffff94895f924160 | file object: 0xffff94895f9241e0 | offsetby: 0x80 \Windows\SysWOW64\wlidprov.dll pool: 0xffff94895f9242f0 | file object: 0xffff94895f924370 | offsetby: 0x80 \Windows\System32\en-US\windows.storage.dll.mui pool: 0xffff94895f924480 | file object: 0xffff94895f924500 | offsetby: 0x80 \Windows\SysWOW64\FamilySafetyExt.dll pool: 0xffff94895f924610 | file object: 0xffff94895f924690 | offsetby: 0x80 \Windows\System32\WaaSMedicCapsule.dll pool: 0xffff94895f9247a0 | file object: 0xffff94895f924820 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\Update\update.xml pool: 0xffff94895f924930 | file object: 0xffff94895f9249b0 | offsetby: 0x80 \Windows\SysWOW64\msxml6r.dll pool: 0xffff94895f924ac0 | file object: 0xffff94895f924b40 | offsetby: 0x80 \Windows\SysWOW64\msxml6.dll pool: 0xffff94895f924c50 | file object: 0xffff94895f924cd0 | offsetby: 0x80 \Windows\SysWOW64\twinapi.appcore.dll pool: 0xffff94895f924de0 | file object: 0xffff94895f924e60 | offsetby: 0x80 \Windows\SysWOW64\rmclient.dll pool: 0xffff94895f925100 | file object: 0xffff94895f925180 | offsetby: 0x80 \Windows\SysWOW64\WinTypes.dll pool: 0xffff94895f925290 | file object: 0xffff94895f925310 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\FileSync.Resources.dll pool: 0xffff94895f925420 | file object: 0xffff94895f9254a0 | offsetby: 0x80 \Windows\SysWOW64\Windows.Services.TargetedContent.dll pool: 0xffff94895f9255b0 | file object: 0xffff94895f925630 | offsetby: 0x80 \Windows\SysWOW64\OnDemandConnRouteHelper.dll pool: 0xffff94895f925740 | file object: 0xffff94895f9257c0 | offsetby: 0x80 \Windows\SysWOW64\Wpc.dll pool: 0xffff94895f9258d0 | file object: 0xffff94895f925950 | offsetby: 0x80 \Windows\SysWOW64\winnsi.dll pool: 0xffff94895f925a60 | file object: 0xffff94895f925ae0 | offsetby: 0x80 \Windows\SysWOW64\edputil.dll pool: 0xffff94895f925bf0 | file object: 0xffff94895f925c70 | offsetby: 0x80 \Windows\SysWOW64\StructuredQuery.dll pool: 0xffff94895f925d80 | file object: 0xffff94895f925e00 | offsetby: 0x80 \$ConvertToNonresident pool: 0xffff94895f9260a0 | file object: 0xffff94895f926120 | offsetby: 0x80 \Windows\System32\WaaSMedicCapsule.dll pool: 0xffff94895f926230 | file object: 0xffff94895f9262b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\en\FileSync.LocalizedResources.dll.mui pool: 0xffff94895f9263c0 | file object: 0xffff94895f926440 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe pool: 0xffff94895f926550 | file object: 0xffff94895f9265d0 | offsetby: 0x80 \Windows\SysWOW64\dsreg.dll pool: 0xffff94895f9266e0 | file object: 0xffff94895f926760 | offsetby: 0x80 \Windows\SysWOW64\msvcp110_win.dll pool: 0xffff94895f926870 | file object: 0xffff94895f9268f0 | offsetby: 0x80 \Windows\SysWOW64\samcli.dll pool: 0xffff94895f926a00 | file object: 0xffff94895f926a80 | offsetby: 0x80 \Windows\SysWOW64\mssprxy.dll pool: 0xffff94895f926b90 | file object: 0xffff94895f926c10 | offsetby: 0x80 \Windows\Prefetch\AgRobust.db pool: 0xffff94895f926d20 | file object: 0xffff94895f926da0 | offsetby: 0x80 \Windows\SysWOW64\Windows.Storage.Search.dll pool: 0xffff94895f927040 | file object: 0xffff94895f9270c0 | offsetby: 0x80 \Windows\System32\WaaSMedicAgent.exe pool: 0xffff94895f9271d0 | file object: 0xffff94895f927250 | offsetby: 0x80 \Windows\SysWOW64\Windows.Networking.Connectivity.dll pool: 0xffff94895f927360 | file object: 0xffff94895f9273e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9274f0 | file object: 0xffff94895f927570 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f927680 | file object: 0xffff94895f927700 | offsetby: 0x80 \Windows\System32\en-US\shell32.dll.mui pool: 0xffff94895f927810 | file object: 0xffff94895f927890 | offsetby: 0x80 \Users\Public\Documents\desktop.ini pool: 0xffff94895f9279a0 | file object: 0xffff94895f927a20 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm pool: 0xffff94895f927b30 | file object: 0xffff94895f927bb0 | offsetby: 0x80 \Windows\SysWOW64\WindowsCodecs.dll pool: 0xffff94895f927cc0 | file object: 0xffff94895f927d40 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\{17A6A947-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000002.db pool: 0xffff94895f927e50 | file object: 0xffff94895f927ed0 | offsetby: 0x80 \Windows\SysWOW64\apphelp.dll pool: 0xffff94895f928170 | file object: 0xffff94895f9281f0 | offsetby: 0x80 \Windows\SysWOW64\rasadhlp.dll pool: 0xffff94895f928300 | file object: 0xffff94895f928380 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f928490 | file object: 0xffff94895f928510 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f928620 | file object: 0xffff94895f9286a0 | offsetby: 0x80 \Windows\SysWOW64\FWPUCLNT.DLL pool: 0xffff94895f9287b0 | file object: 0xffff94895f928830 | offsetby: 0x80 \Windows\SysWOW64\ieframe.dll pool: 0xffff94895f928940 | file object: 0xffff94895f9289c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f928ad0 | file object: 0xffff94895f928b50 | offsetby: 0x80 \Windows\SoftwareDistribution\Download\a75e1456b7eea7fc8bbfe9d9b17072e2\Metadata\UAOneSettings.dll pool: 0xffff94895f928c60 | file object: 0xffff94895f928ce0 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895f928df0 | file object: 0xffff94895f928e70 | offsetby: 0x80 \Windows\SysWOW64\wshqos.dll pool: 0xffff94895f929110 | file object: 0xffff94895f929190 | offsetby: 0x80 \Windows\SysWOW64\ntshrui.dll pool: 0xffff94895f9292a0 | file object: 0xffff94895f929320 | offsetby: 0x80 \$Directory pool: 0xffff94895f929430 | file object: 0xffff94895f9294b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Microsoft.VisualStudio.Setup.Common.dll pool: 0xffff94895f9295c0 | file object: 0xffff94895f929640 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db pool: 0xffff94895f929750 | file object: 0xffff94895f9297d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9298e0 | file object: 0xffff94895f929960 | offsetby: 0x80 \Windows\SysWOW64\cscapi.dll pool: 0xffff94895f929a70 | file object: 0xffff94895f929af0 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895f929c00 | file object: 0xffff94895f929c80 | offsetby: 0x80 \Windows\SysWOW64\schannel.dll pool: 0xffff94895f929d90 | file object: 0xffff94895f929e10 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db pool: 0xffff94895f92a0b0 | file object: 0xffff94895f92a130 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012 pool: 0xffff94895f92a240 | file object: 0xffff94895f92a2c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92a3d0 | file object: 0xffff94895f92a450 | offsetby: 0x80 \Windows\System32\elslad.dll pool: 0xffff94895f92a560 | file object: 0xffff94895f92a5e0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\H2893ZP6\PreSignInSettingsConfig[1].json pool: 0xffff94895f92a6f0 | file object: 0xffff94895f92a770 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\a64d9df537cb4dc1ac012545a0b7cf8f_1 pool: 0xffff94895f92a880 | file object: 0xffff94895f92a900 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92aa10 | file object: 0xffff94895f92aa90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92aba0 | file object: 0xffff94895f92ac20 | offsetby: 0x80 \Windows\SysWOW64\Windows.Web.dll pool: 0xffff94895f92ad30 | file object: 0xffff94895f92adb0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\7a445720c0c74e41872fa832713cf468_1 pool: 0xffff94895f92b050 | file object: 0xffff94895f92b0d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92b1e0 | file object: 0xffff94895f92b260 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92b370 | file object: 0xffff94895f92b3f0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal pool: 0xffff94895f92b500 | file object: 0xffff94895f92b580 | offsetby: 0x80 \$Directory pool: 0xffff94895f92b690 | file object: 0xffff94895f92b710 | offsetby: 0x80 \Windows\SysWOW64\Windows.StateRepositoryPS.dll pool: 0xffff94895f92b820 | file object: 0xffff94895f92b8a0 | offsetby: 0x80 pool: 0xffff94895f92b9b0 | file object: 0xffff94895f92ba30 | offsetby: 0x80 \Windows\SysWOW64\dpapi.dll pool: 0xffff94895f92bb40 | file object: 0xffff94895f92bbc0 | offsetby: 0x80 \Windows\SysWOW64\cryptnet.dll pool: 0xffff94895f92bcd0 | file object: 0xffff94895f92bd50 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895f92be60 | file object: 0xffff94895f92bee0 | offsetby: 0x80 \$Directory pool: 0xffff94895f92c180 | file object: 0xffff94895f92c200 | offsetby: 0x80 \Windows\SysWOW64\mskeyprotect.dll pool: 0xffff94895f92c310 | file object: 0xffff94895f92c390 | offsetby: 0x80 \Windows\ShellExperiences\JumpViewUI.dll pool: 0xffff94895f92c4a0 | file object: 0xffff94895f92c520 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 pool: 0xffff94895f92c630 | file object: 0xffff94895f92c6b0 | offsetby: 0x80 \Windows\SysWOW64\ncryptsslp.dll pool: 0xffff94895f92c7c0 | file object: 0xffff94895f92c840 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx pool: 0xffff94895f92c950 | file object: 0xffff94895f92c9d0 | offsetby: 0x80 \Windows\SysWOW64\policymanager.dll pool: 0xffff94895f92cae0 | file object: 0xffff94895f92cb60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f92cc70 | file object: 0xffff94895f92ccf0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92ce00 | file object: 0xffff94895f92ce80 | offsetby: 0x80 \$Directory pool: 0xffff94895f92d120 | file object: 0xffff94895f92d1a0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811\98e7eff0164b473d908fe82306be5919_1 pool: 0xffff94895f92d2b0 | file object: 0xffff94895f92d330 | offsetby: 0x80 \Windows\SysWOW64\wkscli.dll pool: 0xffff94895f92d5d0 | file object: 0xffff94895f92d650 | offsetby: 0x80 \Users\User\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 pool: 0xffff94895f92d760 | file object: 0xffff94895f92d7e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f92d8f0 | file object: 0xffff94895f92d970 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92da80 | file object: 0xffff94895f92db00 | offsetby: 0x80 \$Directory pool: 0xffff94895f92dc10 | file object: 0xffff94895f92dc90 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012 pool: 0xffff94895f92dda0 | file object: 0xffff94895f92de20 | offsetby: 0x80 \$Directory pool: 0xffff94895f92e0c0 | file object: 0xffff94895f92e140 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f92e250 | file object: 0xffff94895f92e2d0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 pool: 0xffff94895f92e3e0 | file object: 0xffff94895f92e460 | offsetby: 0x80 \Windows\SysWOW64\d3d11.dll pool: 0xffff94895f92e570 | file object: 0xffff94895f92e5f0 | offsetby: 0x80 \Windows\SysWOW64\DataExchange.dll pool: 0xffff94895f92e700 | file object: 0xffff94895f92e780 | offsetby: 0x80 \Windows\SysWOW64\TextInputFramework.dll pool: 0xffff94895f92e890 | file object: 0xffff94895f92e910 | offsetby: 0x80 \Windows\SysWOW64\ntmarta.dll pool: 0xffff94895f92ea20 | file object: 0xffff94895f92eaa0 | offsetby: 0x80 괁ܐ扏捓dows넀薫舎￿≱⇔䑲㷚˜蠄€ŒlāĀȁༀ8ਁༀЀ겫擨쌗얫଑㯗졭誝툳朘䔡㕅茒⏿ᶧāԀāԀࠁ pool: 0xffff94895f92ebb0 | file object: 0xffff94895f92ec30 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\fa9e912a31e042308f61ac0d23b19bbd_1 pool: 0xffff94895f92ed40 | file object: 0xffff94895f92edc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f92f060 | file object: 0xffff94895f92f0e0 | offsetby: 0x80 \Windows\SysWOW64\CoreUIComponents.dll pool: 0xffff94895f92f1f0 | file object: 0xffff94895f92f270 | offsetby: 0x80 \Windows\SysWOW64\CoreMessaging.dll pool: 0xffff94895f92f380 | file object: 0xffff94895f92f400 | offsetby: 0x80 \Windows\System32\en-US\ieframe.dll.mui pool: 0xffff94895f92f510 | file object: 0xffff94895f92f590 | offsetby: 0x80 \Windows\SysWOW64\mshtml.dll pool: 0xffff94895f92f6a0 | file object: 0xffff94895f92f720 | offsetby: 0x80 \Windows\SysWOW64\MicrosoftAccountTokenProvider.dll pool: 0xffff94895f92f830 | file object: 0xffff94895f92f8b0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\4a1f5bfd121c4b11b7f8733398ea0e83_1 pool: 0xffff94895f92f9c0 | file object: 0xffff94895f92fa40 | offsetby: 0x80 \Windows\SysWOW64\dxgi.dll pool: 0xffff94895f92fb50 | file object: 0xffff94895f92fbd0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 pool: 0xffff94895f92fce0 | file object: 0xffff94895f92fd60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f92fe70 | file object: 0xffff94895f92fef0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8a610f9dd0bab5b271f8738bfd5e66b4deaac24d\8a610f9dd0bab5b271f8738bfd5e66b4deaac24d.pieceshash pool: 0xffff94895f930000 | file object: 0xffff94895f930080 | offsetby: 0x80 \$Directory pool: 0xffff94895f930190 | file object: 0xffff94895f930210 | offsetby: 0x80 \Windows\SysWOW64\DXCore.dll pool: 0xffff94895f930320 | file object: 0xffff94895f9303a0 | offsetby: 0x80 \Windows\System32\OpcServices.dll pool: 0xffff94895f9304b0 | file object: 0xffff94895f930530 | offsetby: 0x80 \$Directory pool: 0xffff94895f930640 | file object: 0xffff94895f9306c0 | offsetby: 0x80 \Windows\SysWOW64\dcomp.dll pool: 0xffff94895f9307d0 | file object: 0xffff94895f930850 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\8a610f9dd0bab5b271f8738bfd5e66b4deaac24d\dc8e5cb7699b35f716ba32a7a59a01448c65337d011f725b6c26309c49a2fea3 pool: 0xffff94895f930960 | file object: 0xffff94895f9309e0 | offsetby: 0x80 \Windows\System32\en-US\ieframe.dll.mui pool: 0xffff94895f930af0 | file object: 0xffff94895f930b70 | offsetby: 0x80 \Windows\System32\comuid.dll pool: 0xffff94895f930c80 | file object: 0xffff94895f930d00 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\9M225O7R\Converged_v21033_-0mnSwu67knBd7qR7YN9GQ2[1].css pool: 0xffff94895f930e10 | file object: 0xffff94895f930e90 | offsetby: 0x80 \$Directory pool: 0xffff94895f931130 | file object: 0xffff94895f9311b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9312c0 | file object: 0xffff94895f931340 | offsetby: 0x80 \Windows\SysWOW64\en-US\urlmon.dll.mui pool: 0xffff94895f931450 | file object: 0xffff94895f9314d0 | offsetby: 0x80 \Windows\System32\cellulardatacapabilityhandler.dll pool: 0xffff94895f9315e0 | file object: 0xffff94895f931660 | offsetby: 0x80 \Windows\System32\elslad.dll pool: 0xffff94895f931770 | file object: 0xffff94895f9317f0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\OVV37CJY\ConvergedLoginPaginatedStrings.en_SfTn_o5yPShrIvTOaHpsKA2[1].js pool: 0xffff94895f931900 | file object: 0xffff94895f931980 | offsetby: 0x80 \Windows\SysWOW64\d2d1.dll pool: 0xffff94895f931a90 | file object: 0xffff94895f931b10 | offsetby: 0x80 \Windows\SysWOW64\d3d10warp.dll pool: 0xffff94895f931c20 | file object: 0xffff94895f931ca0 | offsetby: 0x80 \Windows\SysWOW64\en-US\jscript9.dll.mui pool: 0xffff94895f931db0 | file object: 0xffff94895f931e30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9320d0 | file object: 0xffff94895f932150 | offsetby: 0x80 \Windows\SysWOW64\wldp.dll pool: 0xffff94895f932260 | file object: 0xffff94895f9322e0 | offsetby: 0x80 \Windows\System32\en-US\mshtml.dll.mui pool: 0xffff94895f9323f0 | file object: 0xffff94895f932470 | offsetby: 0x80 \Windows\SysWOW64\msimtf.dll pool: 0xffff94895f932580 | file object: 0xffff94895f932600 | offsetby: 0x80 \Windows\SysWOW64\jscript9.dll pool: 0xffff94895f932710 | file object: 0xffff94895f932790 | offsetby: 0x80 \Windows\Prefetch\PfPre_1374257b.mkd pool: 0xffff94895f9328a0 | file object: 0xffff94895f932920 | offsetby: 0x80 \Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll pool: 0xffff94895f932a30 | file object: 0xffff94895f932ab0 | offsetby: 0x80 \Windows\SysWOW64\DWrite.dll pool: 0xffff94895f932bc0 | file object: 0xffff94895f932c40 | offsetby: 0x80 \Windows\SysWOW64\srpapi.dll pool: 0xffff94895f932d50 | file object: 0xffff94895f932dd0 | offsetby: 0x80 \Windows\SysWOW64\ResourcePolicyClient.dll pool: 0xffff94895f933070 | file object: 0xffff94895f9330f0 | offsetby: 0x80 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_2e6decc4278ee012 pool: 0xffff94895f933200 | file object: 0xffff94895f933280 | offsetby: 0x80 \Windows\System32\en-US\propsys.dll.mui pool: 0xffff94895f933390 | file object: 0xffff94895f933410 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\2ac3ce7c582a3dab4663c700b7a6ee798b09349b\2ac3ce7c582a3dab4663c700b7a6ee798b09349b.pieceshash pool: 0xffff94895f933520 | file object: 0xffff94895f9335a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9336b0 | file object: 0xffff94895f933730 | offsetby: 0x80 \Windows\System32\en-US\sysmain.dll.mui pool: 0xffff94895f933840 | file object: 0xffff94895f9338c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9339d0 | file object: 0xffff94895f933a50 | offsetby: 0x80 \Windows\SysWOW64\UIAutomationCore.dll pool: 0xffff94895f933b60 | file object: 0xffff94895f933be0 | offsetby: 0x80 \Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf pool: 0xffff94895f933cf0 | file object: 0xffff94895f933d70 | offsetby: 0x80 \Windows\Prefetch\AgAppLaunch.db pool: 0xffff94895f934010 | file object: 0xffff94895f934090 | offsetby: 0x80 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui pool: 0xffff94895f9341a0 | file object: 0xffff94895f934220 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f934330 | file object: 0xffff94895f9343b0 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\S-1-5-21-3234566417-3121902272-2793192418-1001.pckgdep pool: 0xffff94895f9344c0 | file object: 0xffff94895f934540 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\2ac3ce7c582a3dab4663c700b7a6ee798b09349b\2a60267e790942dfdf2fe4407cee93ef8039457339704e44726bae6683da5335 pool: 0xffff94895f934650 | file object: 0xffff94895f9346d0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\OVV37CJY\ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c[1].svg pool: 0xffff94895f9347e0 | file object: 0xffff94895f934860 | offsetby: 0x80 \Windows\SysWOW64\vaultcli.dll pool: 0xffff94895f934970 | file object: 0xffff94895f9349f0 | offsetby: 0x80 \Windows\System32\WindowsInternal.ComposableShell.DesktopHosting.dll pool: 0xffff94895f934b00 | file object: 0xffff94895f934b80 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\GSDEMWM0\OldConvergedLogin_PCore_6RckLmnA1dyUG5gB9JNc1g2[1].js pool: 0xffff94895f934c90 | file object: 0xffff94895f934d10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f934e20 | file object: 0xffff94895f934ea0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f935140 | file object: 0xffff94895f9351c0 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\c7d11ba3ca67a7b5e9e77b1f63ef04a7d209b2f6\c7d11ba3ca67a7b5e9e77b1f63ef04a7d209b2f6.pieceshash pool: 0xffff94895f9352d0 | file object: 0xffff94895f935350 | offsetby: 0x80 \Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll pool: 0xffff94895f935460 | file object: 0xffff94895f9354e0 | offsetby: 0x80 \Windows\ShellExperiences\TileControl.dll pool: 0xffff94895f9355f0 | file object: 0xffff94895f935670 | offsetby: 0x80 \Windows\ShellComponents\TaskFlowUI.dll pool: 0xffff94895f935780 | file object: 0xffff94895f935800 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f935910 | file object: 0xffff94895f935990 | offsetby: 0x80 \Windows\Fonts\segoeui.ttf pool: 0xffff94895f935aa0 | file object: 0xffff94895f935b20 | offsetby: 0x80 \Windows\SystemResources\Windows.UI.Cred\Windows.UI.Cred.pris\app\extensions\vb\package.jsonson pool: 0xffff94895f935c30 | file object: 0xffff94895f935cb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f935dc0 | file object: 0xffff94895f935e40 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\GSDEMWM0\ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73[1].svg pool: 0xffff94895f9360e0 | file object: 0xffff94895f936160 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f936270 | file object: 0xffff94895f9362f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f936400 | file object: 0xffff94895f936480 | offsetby: 0x80 \$Directory pool: 0xffff94895f936590 | file object: 0xffff94895f936610 | offsetby: 0x80 \Windows\SysWOW64\OneCoreCommonProxyStub.dll pool: 0xffff94895f936720 | file object: 0xffff94895f9367a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9368b0 | file object: 0xffff94895f936930 | offsetby: 0x80 \Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Cache\c7d11ba3ca67a7b5e9e77b1f63ef04a7d209b2f6\86aea5f7be1ce29416d396ec88a6e983f72289bb4d959a9ef95df2116a4334b2 pool: 0xffff94895f936a40 | file object: 0xffff94895f936ac0 | offsetby: 0x80 瞐誾舎￿盓誾舎￿僀怌钉￿캈蠬舎￿蕨蝨舎￿ pool: 0xffff94895f936bd0 | file object: 0xffff94895f936c50 | offsetby: 0x80 \$Directory pool: 0xffff94895f936d60 | file object: 0xffff94895f936de0 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f937080 | file object: 0xffff94895f937100 | offsetby: 0x80 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm pool: 0xffff94895f937210 | file object: 0xffff94895f937290 | offsetby: 0x80 \Windows\System32\spool\drivers\W32X86\PCC pool: 0xffff94895f9373a0 | file object: 0xffff94895f937420 | offsetby: 0x80 \Windows\System32\spool\drivers\W32X86\PCC pool: 0xffff94895f937530 | file object: 0xffff94895f9375b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9376c0 | file object: 0xffff94895f937740 | offsetby: 0x80 \$Directory pool: 0xffff94895f937850 | file object: 0xffff94895f9378d0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\e2507c6929371fa69b5e96a6e097ee69\System.Xml.ni.dll pool: 0xffff94895f9379e0 | file object: 0xffff94895f937a60 | offsetby: 0x80 ૎銤댰榰istry\MACHIN긃܎扏捓stem氀讞舎￿㷞콁솔耄XtDƟȁԀ Ƞ$ƟԁԀ鄑샋狀먔믢꙼ϩԁԀ鄑샋狀먔믢꙼ϩԁ pool: 0xffff94895f937b70 | file object: 0xffff94895f937bf0 | offsetby: 0x80 \Users\User\AppData\Local\Temp\__PSScriptPolicyTest_0rohvhas.usu.psm1āԀကāԀࠁȁༀࠁȁ pool: 0xffff94895f937d00 | file object: 0xffff94895f937d80 | offsetby: 0x80 \Windows\System32\ploptin.dll pool: 0xffff94895f938020 | file object: 0xffff94895f9380a0 | offsetby: 0x80 \Windows\System32\dot3mm.dll pool: 0xffff94895f9381b0 | file object: 0xffff94895f938230 | offsetby: 0x80 ďdows\assembly\GAC_64\MicrosoAzureRM.ServiceFabric.ni.dllml0__31bf3856ad364e35\Microsoft.Powers pool: 0xffff94895f938340 | file object: 0xffff94895f9383c0 | offsetby: 0x80 \Windows\WaaS\services\315818c03ccc2b10070df2d4ebd09eb6c4c66e58.xml pool: 0xffff94895f9384d0 | file object: 0xffff94895f938550 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\html\package.nls.json pool: 0xffff94895f938660 | file object: 0xffff94895f9386e0 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f9387f0 | file object: 0xffff94895f938870 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\theme-solarized-light\package.nls.json pool: 0xffff94895f938980 | file object: 0xffff94895f938a00 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f938b10 | file object: 0xffff94895f938b90 | offsetby: 0x80 \$Directory pool: 0xffff94895f938ca0 | file object: 0xffff94895f938d20 | offsetby: 0x80 \$Directory pool: 0xffff94895f938e30 | file object: 0xffff94895f938eb0 | offsetby: 0x80 \Windows\System32\dmcsps.dll pool: 0xffff94895f939150 | file object: 0xffff94895f9391d0 | offsetby: 0x80 \Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\Microsoft.PowerShell.PSReadline.dll.json pool: 0xffff94895f9392e0 | file object: 0xffff94895f939360 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f939470 | file object: 0xffff94895f9394f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f939600 | file object: 0xffff94895f939680 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f939790 | file object: 0xffff94895f939810 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f939920 | file object: 0xffff94895f9399a0 | offsetby: 0x80 \Windows\System32\devrtl.dll pool: 0xffff94895f939ab0 | file object: 0xffff94895f939b30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f939c40 | file object: 0xffff94895f939cc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f939dd0 | file object: 0xffff94895f939e50 | offsetby: 0x80 \Windows\System32\spool\drivers\x64\PCC pool: 0xffff94895f93a0f0 | file object: 0xffff94895f93a170 | offsetby: 0x80 \Windows\System32\credui.dll pool: 0xffff94895f93a280 | file object: 0xffff94895f93a300 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\PerfMarkers\Microsoft.DiagnosticsHub.PerfMarkers.dll pool: 0xffff94895f93a410 | file object: 0xffff94895f93a490 | offsetby: 0x80 \Windows\System32\browcli.dll pool: 0xffff94895f93a5a0 | file object: 0xffff94895f93a620 | offsetby: 0x80 \Windows\System32\qmgr.dll pool: 0xffff94895f93a730 | file object: 0xffff94895f93a7b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VC\vcpackages\VCProject.dlleSquare4 pool: 0xffff94895f93a8c0 | file object: 0xffff94895f93a940 | offsetby: 0x80 \$Directory pool: 0xffff94895f93aa50 | file object: 0xffff94895f93aad0 | offsetby: 0x80 \Windows\System32\cryptui.dll pool: 0xffff94895f93abe0 | file object: 0xffff94895f93ac60 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\jake\package.nls.json pool: 0xffff94895f93ad70 | file object: 0xffff94895f93adf0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f93b090 | file object: 0xffff94895f93b110 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ini\package.nls.json pool: 0xffff94895f93b220 | file object: 0xffff94895f93b2a0 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\TabTip.exe pool: 0xffff94895f93b3b0 | file object: 0xffff94895f93b430 | offsetby: 0x80 \Windows\System32\comsvcs.dll pool: 0xffff94895f93b540 | file object: 0xffff94895f93b5c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f93b6d0 | file object: 0xffff94895f93b750 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\theme-monokai-dimmed\packag pool: 0xffff94895f93b860 | file object: 0xffff94895f93b8e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f93b9f0 | file object: 0xffff94895f93ba70 | offsetby: 0x80 \$Directory pool: 0xffff94895f93bb80 | file object: 0xffff94895f93bc00 | offsetby: 0x80 \$Directory pool: 0xffff94895f93bd10 | file object: 0xffff94895f93bd90 | offsetby: 0x80 \Windows\System32\en-US\Conhost.exe.mui pool: 0xffff94895f93c030 | file object: 0xffff94895f93c0b0 | offsetby: 0x80 \Windows\System32\Windows.Media.Speech.dll pool: 0xffff94895f93c1c0 | file object: 0xffff94895f93c240 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f93c350 | file object: 0xffff94895f93c3d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\log\package.nls.json pool: 0xffff94895f93c4e0 | file object: 0xffff94895f93c560 | offsetby: 0x80 \Windows\System32\conhost.exe pool: 0xffff94895f93c670 | file object: 0xffff94895f93c6f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\java\package.nls.json pool: 0xffff94895f93c800 | file object: 0xffff94895f93c880 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\json-language-features\package.nls.json pool: 0xffff94895f93c990 | file object: 0xffff94895f93ca10 | offsetby: 0x80 \Windows\System32\clbcatq.dll pool: 0xffff94895f93cb20 | file object: 0xffff94895f93cba0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Core\b4bf7266d73c05a0e87b198b961a00a0\System.Core.ni.dll.aux pool: 0xffff94895f93ccb0 | file object: 0xffff94895f93cd30 | offsetby: 0x80 ൦⤳&㥻㠴䙃㡄ⵃ㠱㠸㐭㕅ⴲ㜸㌰㤭㘹〱㐳 pool: 0xffff94895f93ce40 | file object: 0xffff94895f93cec0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Core\c9243edb149eb78c5309c103df69d594\System.Core.ni.dll.aux pool: 0xffff94895f93d160 | file object: 0xffff94895f93d1e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f93d2f0 | file object: 0xffff94895f93d370 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f93d480 | file object: 0xffff94895f93d500 | offsetby: 0x80 \$Directory pool: 0xffff94895f93d610 | file object: 0xffff94895f93d690 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\make\package.nls.json pool: 0xffff94895f93d7a0 | file object: 0xffff94895f93d820 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\merge-conflict\package.nls.json pool: 0xffff94895f93d930 | file object: 0xffff94895f93d9b0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\php\package.nls.json pool: 0xffff94895f93dac0 | file object: 0xffff94895f93db40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Microsoft.VisualStudio.Utilities.Internal.dll pool: 0xffff94895f93dc50 | file object: 0xffff94895f93dcd0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\php-language-features\package.nls.json pool: 0xffff94895f93dde0 | file object: 0xffff94895f93de60 | offsetby: 0x80 \Windows\System32\Query.dll pool: 0xffff94895f93e100 | file object: 0xffff94895f93e180 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.dbezureRM.ServerManagement.ps pool: 0xffff94895f93e290 | file object: 0xffff94895f93e310 | offsetby: 0x80 \Device\HarddiskVolume2\Program Files\WindowsPowerShell\Modules\AzureRM.ApplicationInsights\AzureR pool: 0xffff94895f93e420 | file object: 0xffff94895f93e4a0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\perl\package.nls.json pool: 0xffff94895f93e5b0 | file object: 0xffff94895f93e630 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Microsoft.VisualStudio.Telemetry.dll pool: 0xffff94895f93e740 | file object: 0xffff94895f93e7c0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ms-vscode.node-debug\package.nls.json pool: 0xffff94895f93e8d0 | file object: 0xffff94895f93e950 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll pool: 0xffff94895f93ea60 | file object: 0xffff94895f93eae0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\objective-c\package.nls.json pool: 0xffff94895f93ebf0 | file object: 0xffff94895f93ec70 | offsetby: 0x80 \Windows\System32\Windows.Management.Workplace.dll pool: 0xffff94895f93ed80 | file object: 0xffff94895f93ee00 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\DiagOutputDir\SkypeApp0.txt pool: 0xffff94895f93f0a0 | file object: 0xffff94895f93f120 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Core\c9243edb149eb78c5309c103df69d594\System.Core.ni.dll pool: 0xffff94895f93f230 | file object: 0xffff94895f93f2b0 | offsetby: 0x80 \Windows\System32\en-US\KernelBase.dll.mui pool: 0xffff94895f93f3c0 | file object: 0xffff94895f93f440 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\markdown-basics\package.nls.json pool: 0xffff94895f93f550 | file object: 0xffff94895f93f5d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\json\package.nls.json pool: 0xffff94895f93f6e0 | file object: 0xffff94895f93f760 | offsetby: 0x80 \Windows\System32\tzres.dll pool: 0xffff94895f93f870 | file object: 0xffff94895f93f8f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\markdown-language-features\package.nls.json pool: 0xffff94895f93fa00 | file object: 0xffff94895f93fa80 | offsetby: 0x80 pool: 0xffff94895f93fb90 | file object: 0xffff94895f93fc10 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Vf87aed9a#\c401765b4bc494553c8f4f9164de67bb\Microsoft.VisualStudio.Telemetry.ni.dll.aux pool: 0xffff94895f93fd20 | file object: 0xffff94895f93fda0 | offsetby: 0x80 \$Directory pool: 0xffff94895f940040 | file object: 0xffff94895f9400c0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\npm\package.nls.json pool: 0xffff94895f9401d0 | file object: 0xffff94895f940250 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll.aux pool: 0xffff94895f940360 | file object: 0xffff94895f9403e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\LiveShare\Microsoft.VisualStudio.LiveShare.ContactServiceProtocol.dll pool: 0xffff94895f9404f0 | file object: 0xffff94895f940570 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\36d0bbf456e19171162fb117487d13e6\System.Configuration.ni.dll.aux pool: 0xffff94895f940680 | file object: 0xffff94895f940700 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f940810 | file object: 0xffff94895f940890 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll pool: 0xffff94895f9409a0 | file object: 0xffff94895f940a20 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat pool: 0xffff94895f940b30 | file object: 0xffff94895f940bb0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll pool: 0xffff94895f940cc0 | file object: 0xffff94895f940d40 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG2 pool: 0xffff94895f940e50 | file object: 0xffff94895f940ed0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\LiveShare\Microsoft.VisualStudio.LiveShare.LanguageServices.16.3.dll pool: 0xffff94895f941170 | file object: 0xffff94895f9411f0 | offsetby: 0x80 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui pool: 0xffff94895f941300 | file object: 0xffff94895f941380 | offsetby: 0x80 \Windows\System32\svchost.exe pool: 0xffff94895f941490 | file object: 0xffff94895f941510 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Microsoft.VisualStudio.RemoteControl.dll pool: 0xffff94895f941620 | file object: 0xffff94895f9416a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXAutoUpdate.exe pool: 0xffff94895f9417b0 | file object: 0xffff94895f941830 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f941940 | file object: 0xffff94895f9419c0 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG1 pool: 0xffff94895f941ad0 | file object: 0xffff94895f941b50 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\2ab9225a1e821c43e98be3dd12d21ba7\System.Runtime.Serialization.ni.dll.aux pool: 0xffff94895f941c60 | file object: 0xffff94895f941ce0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f941df0 | file object: 0xffff94895f941e70 | offsetby: 0x80 \$Directory pool: 0xffff94895f942110 | file object: 0xffff94895f942190 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\xml\package.nls.json pool: 0xffff94895f9422a0 | file object: 0xffff94895f942320 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\e2507c6929371fa69b5e96a6e097ee69\System.Xml.ni.dll.aux pool: 0xffff94895f942430 | file object: 0xffff94895f9424b0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2020-06-02.0818.5216.1.odlgz pool: 0xffff94895f9425c0 | file object: 0xffff94895f942640 | offsetby: 0x80 \$Directory pool: 0xffff94895f942750 | file object: 0xffff94895f9427d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\python\package.nls.json pool: 0xffff94895f9428e0 | file object: 0xffff94895f942960 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\36d0bbf456e19171162fb117487d13e6\System.Configuration.ni.dll pool: 0xffff94895f942a70 | file object: 0xffff94895f942af0 | offsetby: 0x80 \Users\User\Videos㠸悭钉￿ꋸ藫舎￿쭐彟 pool: 0xffff94895f942c00 | file object: 0xffff94895f942c80 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\rust\package.nls.json pool: 0xffff94895f942d90 | file object: 0xffff94895f942e10 | offsetby: 0x80 \Windows\System32\taskschd.dll pool: 0xffff94895f9430b0 | file object: 0xffff94895f943130 | offsetby: 0x80 \Windows\System32\sspicli.dll pool: 0xffff94895f943240 | file object: 0xffff94895f9432c0 | offsetby: 0x80 ꯗ盌肨讲舎￿&ほ䈰㉂㘷ⴳ䄶㜷ㄭ䐱ⴰ㕁㔳〭䌰㐰䑆䐷 pool: 0xffff94895f9433d0 | file object: 0xffff94895f943450 | offsetby: 0x80 \$Directory pool: 0xffff94895f943560 | file object: 0xffff94895f9435e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9436f0 | file object: 0xffff94895f943770 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f943880 | file object: 0xffff94895f943900 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f943a10 | file object: 0xffff94895f943a90 | offsetby: 0x80 \Windows\WaaS\services\14a3f9e824793931d34f7f786a538bbc9ef1f0d6.xml pool: 0xffff94895f943ba0 | file object: 0xffff94895f943c20 | offsetby: 0x80 \Windows\System32\usocoreps.dll pool: 0xffff94895f943d30 | file object: 0xffff94895f943db0 | offsetby: 0x80 \Windows\System32\en-US\mswsock.dll.mui pool: 0xffff94895f944050 | file object: 0xffff94895f9440d0 | offsetby: 0x80 \Windows\WaaS\services\ceb497ee0184aaa4681d2fb2ef242a5b8551eea8.xml pool: 0xffff94895f9441e0 | file object: 0xffff94895f944260 | offsetby: 0x80 \$Directory pool: 0xffff94895f944370 | file object: 0xffff94895f9443f0 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-DF3D779F.pf pool: 0xffff94895f944500 | file object: 0xffff94895f944580 | offsetby: 0x80 \$Directory pool: 0xffff94895f944690 | file object: 0xffff94895f944710 | offsetby: 0x80 \Windows\WaaS\services\43ee7b2a373632f9a701249fd96d0edec2ff1279.xml pool: 0xffff94895f944820 | file object: 0xffff94895f9448a0 | offsetby: 0x80 \Windows\System32\sppc.dll pool: 0xffff94895f9449b0 | file object: 0xffff94895f944a30 | offsetby: 0x80 \$Directory pool: 0xffff94895f944b40 | file object: 0xffff94895f944bc0 | offsetby: 0x80 \Windows\System32\en-US\sppc.dll.mui pool: 0xffff94895f944cd0 | file object: 0xffff94895f944d50 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f944e60 | file object: 0xffff94895f944ee0 | offsetby: 0x80 \$Directory pool: 0xffff94895f945180 | file object: 0xffff94895f945200 | offsetby: 0x80 \Windows\servicing\en-US\TrustedInstaller.exe.mui pool: 0xffff94895f945310 | file object: 0xffff94895f945390 | offsetby: 0x80 \Windows\WaaS\services\2213703c9c64cc61ba900531652e23c84728d2a2.xml pool: 0xffff94895f9454a0 | file object: 0xffff94895f945520 | offsetby: 0x80 \Windows\servicing\TrustedInstaller.exe pool: 0xffff94895f945630 | file object: 0xffff94895f9456b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9457c0 | file object: 0xffff94895f945840 | offsetby: 0x80 \Windows\System32\en-US\qmgr.dll.mui pool: 0xffff94895f945950 | file object: 0xffff94895f9459d0 | offsetby: 0x80 \Windows\WaaS\services\20bbcadaff3e0543ef358ba4dd8b74bfe8e747c8.xml pool: 0xffff94895f945ae0 | file object: 0xffff94895f945b60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f945c70 | file object: 0xffff94895f945cf0 | offsetby: 0x80 \Windows\System32\en-US\urlmon.dll.mui pool: 0xffff94895f945e00 | file object: 0xffff94895f945e80 | offsetby: 0x80 \Windows\System32\en-US\usosvc.dll.mui pool: 0xffff94895f946120 | file object: 0xffff94895f9461a0 | offsetby: 0x80 \Windows\System32\usosvc.dll pool: 0xffff94895f9462b0 | file object: 0xffff94895f946330 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f946440 | file object: 0xffff94895f9464c0 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895f9465d0 | file object: 0xffff94895f946650 | offsetby: 0x80 \Windows\System32 pool: 0xffff94895f946760 | file object: 0xffff94895f9467e0 | offsetby: 0x80 \Windows\System32\en-US\crypt32.dll.mui pool: 0xffff94895f9468f0 | file object: 0xffff94895f946970 | offsetby: 0x80 \Windows\System32\wuapi.dll pool: 0xffff94895f946a80 | file object: 0xffff94895f946b00 | offsetby: 0x80 \Windows\System32\AuthBroker.dll pool: 0xffff94895f946c10 | file object: 0xffff94895f946c90 | offsetby: 0x80 \Windows\System32\usoapi.dll pool: 0xffff94895f946da0 | file object: 0xffff94895f946e20 | offsetby: 0x80 \Windows\System32\usocoreworker.exe pool: 0xffff94895f9470c0 | file object: 0xffff94895f947140 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{0F1B9514-C41D-46DC-9951-EEC87BC9F25A}.catalogItem pool: 0xffff94895f947250 | file object: 0xffff94895f9472d0 | offsetby: 0x80 \Windows\System32\ConhostV1.dll pool: 0xffff94895f9473e0 | file object: 0xffff94895f947460 | offsetby: 0x80 \Windows\System32\CertPolEng.dll pool: 0xffff94895f947570 | file object: 0xffff94895f9475f0 | offsetby: 0x80 \ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.b39bc11e-a3ef-408d-bd36-e40e8bdca0ea.1.etl pool: 0xffff94895f947700 | file object: 0xffff94895f947780 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{2A270405-32BA-4BB0-B404-0B471BA5A020}.catalogItem pool: 0xffff94895f947890 | file object: 0xffff94895f947910 | offsetby: 0x80 \Windows\SoftwareDistribution\Download\a75e1456b7eea7fc8bbfe9d9b17072e2\Metadata\wcp.dll pool: 0xffff94895f947a20 | file object: 0xffff94895f947aa0 | offsetby: 0x80 \Windows\System32\defragsvc.dll pool: 0xffff94895f947bb0 | file object: 0xffff94895f947c30 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{4D1C28C2-A9F2-4197-BDEF-BF069CD557DC}.catalogItem pool: 0xffff94895f947d40 | file object: 0xffff94895f947dc0 | offsetby: 0x80 \ProgramData\Microsoft\Windows Defender\Definition Updates\{CADD1341-43E6-4F8B-836D-4B5D38F18D8A pool: 0xffff94895f948060 | file object: 0xffff94895f9480e0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{6E9228BC-B29B-4E01-8492-39C10FEDCE9C}.catalogItem pool: 0xffff94895f9481f0 | file object: 0xffff94895f948270 | offsetby: 0x80 \Windows\System32\usocoreworker.exe pool: 0xffff94895f948380 | file object: 0xffff94895f948400 | offsetby: 0x80 \Windows\System32\usoapi.dll pool: 0xffff94895f948510 | file object: 0xffff94895f948590 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9486a0 | file object: 0xffff94895f948720 | offsetby: 0x80 \Windows\System32\COLORCNV.DLL pool: 0xffff94895f948830 | file object: 0xffff94895f9488b0 | offsetby: 0x80 \Windows\Prefetch\USOCOREWORKER.EXE-21FE932A.pf pool: 0xffff94895f9489c0 | file object: 0xffff94895f948a40 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{222374BC-F014-49FF-B36B-2CABAB26167F}.catalogItem pool: 0xffff94895f948b50 | file object: 0xffff94895f948bd0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f948ce0 | file object: 0xffff94895f948d60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f948e70 | file object: 0xffff94895f948ef0 | offsetby: 0x80 \$Directory pool: 0xffff94895f949000 | file object: 0xffff94895f949080 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.710_none_5f52d84058d0677f\ReserveManager.dll pool: 0xffff94895f949190 | file object: 0xffff94895f949210 | offsetby: 0x80 \Windows\System32\usocoreps.dll pool: 0xffff94895f949320 | file object: 0xffff94895f9493a0 | offsetby: 0x80 \Windows\System32\dmdskmgr.dll pool: 0xffff94895f9494b0 | file object: 0xffff94895f949530 | offsetby: 0x80 \Windows\System32\en-US\svchost.exe.mui pool: 0xffff94895f949640 | file object: 0xffff94895f9496c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9497d0 | file object: 0xffff94895f949850 | offsetby: 0x80 \Windows\System32\SSShim.dll pool: 0xffff94895f949960 | file object: 0xffff94895f9499e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f949af0 | file object: 0xffff94895f949b70 | offsetby: 0x80 \Windows\System32\upshared.dll pool: 0xffff94895f949c80 | file object: 0xffff94895f949d00 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{6FDCDC9A-13CE-4480-B7F5-92F7A05EA5E2}.catalogItem pool: 0xffff94895f949e10 | file object: 0xffff94895f949e90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f94a130 | file object: 0xffff94895f94a1b0 | offsetby: 0x80 \Windows\System32\AppXDeploymentExtensions.onecore.dll pool: 0xffff94895f94a2c0 | file object: 0xffff94895f94a340 | offsetby: 0x80 \Windows\ShellExperiences\Windows.UI.ActionCenter.dll pool: 0xffff94895f94a450 | file object: 0xffff94895f94a4d0 | offsetby: 0x80 \Windows\System32\AppXDeploymentExtensions.desktop.dll pool: 0xffff94895f94a5e0 | file object: 0xffff94895f94a660 | offsetby: 0x80 \Windows\ShellExperiences\NetworkUX.dll pool: 0xffff94895f94a770 | file object: 0xffff94895f94a7f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94a900 | file object: 0xffff94895f94a980 | offsetby: 0x80 pool: 0xffff94895f94aa90 | file object: 0xffff94895f94ab10 | offsetby: 0x80 \$Directory pool: 0xffff94895f94ac20 | file object: 0xffff94895f94aca0 | offsetby: 0x80 \Windows\ShellExperiences\BatteryFlyoutExperience.dll pool: 0xffff94895f94adb0 | file object: 0xffff94895f94ae30 | offsetby: 0x80 \$Directory pool: 0xffff94895f94b0d0 | file object: 0xffff94895f94b150 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\InkObj.dll pool: 0xffff94895f94b260 | file object: 0xffff94895f94b2e0 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\tipskins.dll pool: 0xffff94895f94b3f0 | file object: 0xffff94895f94b470 | offsetby: 0x80 \$Directory pool: 0xffff94895f94b580 | file object: 0xffff94895f94b600 | offsetby: 0x80 \$Directory pool: 0xffff94895f94b710 | file object: 0xffff94895f94b790 | offsetby: 0x80 \$Directory pool: 0xffff94895f94b8a0 | file object: 0xffff94895f94b920 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed pool: 0xffff94895f94ba30 | file object: 0xffff94895f94bab0 | offsetby: 0x80 \Windows\ShellExperiences\QuickActions.dll pool: 0xffff94895f94bbc0 | file object: 0xffff94895f94bc40 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\tiptsf.dll pool: 0xffff94895f94bd50 | file object: 0xffff94895f94bdd0 | offsetby: 0x80 \Program Files\Common Files\microsoft shared\ink\tabskb.dll pool: 0xffff94895f94c070 | file object: 0xffff94895f94c0f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Newtonsoft.Json.dll pool: 0xffff94895f94c200 | file object: 0xffff94895f94c280 | offsetby: 0x80 \Windows\System32\AdaptiveCards.dll pool: 0xffff94895f94c390 | file object: 0xffff94895f94c410 | offsetby: 0x80 \Windows\System32\certCredProvider.dll pool: 0xffff94895f94c520 | file object: 0xffff94895f94c5a0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94c6b0 | file object: 0xffff94895f94c730 | offsetby: 0x80 \Windows\ShellExperiences\ClockFlyoutExperience.dll pool: 0xffff94895f94c840 | file object: 0xffff94895f94c8c0 | offsetby: 0x80 \Windows\System32\dmwappushsvc.dll pool: 0xffff94895f94c9d0 | file object: 0xffff94895f94ca50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f94cb60 | file object: 0xffff94895f94cbe0 | offsetby: 0x80 \Users\User\Desktop\lpus-0.3-alpha\target\release\print_pdb.exeon7\IDE\VC\SystemResources\vcproject.dll.munx44 pool: 0xffff94895f94ccf0 | file object: 0xffff94895f94cd70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f94d010 | file object: 0xffff94895f94d090 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f94d1a0 | file object: 0xffff94895f94d220 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f94d330 | file object: 0xffff94895f94d3b0 | offsetby: 0x80 \Windows\System32\jscript.dll pool: 0xffff94895f94d4c0 | file object: 0xffff94895f94d540 | offsetby: 0x80 \$Directory pool: 0xffff94895f94d650 | file object: 0xffff94895f94d6d0 | offsetby: 0x80 \Windows\System32\UIRibbonRes.dll pool: 0xffff94895f94d7e0 | file object: 0xffff94895f94d860 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f94d970 | file object: 0xffff94895f94d9f0 | offsetby: 0x80 \Windows\System32\fdPnp.dll pool: 0xffff94895f94db00 | file object: 0xffff94895f94db80 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f94dc90 | file object: 0xffff94895f94dd10 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f94de20 | file object: 0xffff94895f94dea0 | offsetby: 0x80 \Windows\System32\keepaliveprovider.dll pool: 0xffff94895f94e140 | file object: 0xffff94895f94e1c0 | offsetby: 0x80 \Windows\System32\hgcpl.dll pool: 0xffff94895f94e2d0 | file object: 0xffff94895f94e350 | offsetby: 0x80 \Windows\System32\mfc42.dll pool: 0xffff94895f94e460 | file object: 0xffff94895f94e4e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94e5f0 | file object: 0xffff94895f94e670 | offsetby: 0x80 \$Directory pool: 0xffff94895f94e780 | file object: 0xffff94895f94e800 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_17aba8d26da530da pool: 0xffff94895f94e910 | file object: 0xffff94895f94e990 | offsetby: 0x80 \Windows\System32\mfsvr.dll pool: 0xffff94895f94eaa0 | file object: 0xffff94895f94eb20 | offsetby: 0x80 \$Directory pool: 0xffff94895f94ec30 | file object: 0xffff94895f94ecb0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94edc0 | file object: 0xffff94895f94ee40 | offsetby: 0x80 \Windows\System32\mfc42u.dll pool: 0xffff94895f94f0e0 | file object: 0xffff94895f94f160 | offsetby: 0x80 \$Directory pool: 0xffff94895f94f270 | file object: 0xffff94895f94f2f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94f400 | file object: 0xffff94895f94f480 | offsetby: 0x80 짐誾舎￿ꬓ逘舎￿僀怌钉￿Შ蠭舎￿믈蝨舎￿竰 pool: 0xffff94895f94f590 | file object: 0xffff94895f94f610 | offsetby: 0x80 \$Directory pool: 0xffff94895f94f720 | file object: 0xffff94895f94f7a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f94f8b0 | file object: 0xffff94895f94f930 | offsetby: 0x80 \$Directory pool: 0xffff94895f94fa40 | file object: 0xffff94895f94fac0 | offsetby: 0x80 \$Directory pool: 0xffff94895f94fbd0 | file object: 0xffff94895f94fc50 | offsetby: 0x80 \$Directory pool: 0xffff94895f94fd60 | file object: 0xffff94895f94fde0 | offsetby: 0x80 \Windows\System32\imgutil.dll pool: 0xffff94895f950080 | file object: 0xffff94895f950100 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f950210 | file object: 0xffff94895f950290 | offsetby: 0x80 \Windows\System32\ifsutil.dll pool: 0xffff94895f9503a0 | file object: 0xffff94895f950420 | offsetby: 0x80 \Windows\System32\msoert2.dll pool: 0xffff94895f950530 | file object: 0xffff94895f9505b0 | offsetby: 0x80 \Windows\System32\MP3DMOD.DLL pool: 0xffff94895f9506c0 | file object: 0xffff94895f950740 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f950850 | file object: 0xffff94895f9508d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9509e0 | file object: 0xffff94895f950a60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f950b70 | file object: 0xffff94895f950bf0 | offsetby: 0x80 \Windows\System32\mycomput.dll pool: 0xffff94895f950d00 | file object: 0xffff94895f950d80 | offsetby: 0x80 \Windows\System32\licmgr10.dll pool: 0xffff94895f951020 | file object: 0xffff94895f9510a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Interop.10.0.dll pool: 0xffff94895f9511b0 | file object: 0xffff94895f951230 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f951340 | file object: 0xffff94895f9513c0 | offsetby: 0x80 \Windows\System32\jscript9.dll pool: 0xffff94895f9514d0 | file object: 0xffff94895f951550 | offsetby: 0x80 \Windows\System32\netcfgx.dll pool: 0xffff94895f951660 | file object: 0xffff94895f9516e0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9517f0 | file object: 0xffff94895f951870 | offsetby: 0x80 \Windows\System32\msfeeds.dll pool: 0xffff94895f951980 | file object: 0xffff94895f951a00 | offsetby: 0x80 \Windows\System32\MP4SDECD.DLL pool: 0xffff94895f951b10 | file object: 0xffff94895f951b90 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{8DE8F3B2-1543-40FE-8489-D1D8C5314B87}.catalogItem pool: 0xffff94895f951ca0 | file object: 0xffff94895f951d20 | offsetby: 0x80 \Windows\System32\filemgmt.dll pool: 0xffff94895f951e30 | file object: 0xffff94895f951eb0 | offsetby: 0x80 \Windows\System32\imapi2fs.dll pool: 0xffff94895f952150 | file object: 0xffff94895f9521d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9522e0 | file object: 0xffff94895f952360 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f952470 | file object: 0xffff94895f9524f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f952600 | file object: 0xffff94895f952680 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f952790 | file object: 0xffff94895f952810 | offsetby: 0x80 \Windows\System32\inetcomm.dll pool: 0xffff94895f952920 | file object: 0xffff94895f9529a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f952ab0 | file object: 0xffff94895f952b30 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f952c40 | file object: 0xffff94895f952cc0 | offsetby: 0x80 \Windows\System32\hnetcfg.dll pool: 0xffff94895f952dd0 | file object: 0xffff94895f952e50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f9530f0 | file object: 0xffff94895f953170 | offsetby: 0x80 \Windows\System32\mfreadwrite.dll pool: 0xffff94895f953280 | file object: 0xffff94895f953300 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Da9845d5e#\57b7f99cdb33f369ee47a23d133ac558\Microsoft.Diagnostics.Tracing.EventSource.ni.dll.aux pool: 0xffff94895f953410 | file object: 0xffff94895f953490 | offsetby: 0x80 \Windows\System32\scrrun.dll pool: 0xffff94895f9535a0 | file object: 0xffff94895f953620 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f953730 | file object: 0xffff94895f9537b0 | offsetby: 0x80 \Windows\System32\seclogon.dll pool: 0xffff94895f9538c0 | file object: 0xffff94895f953940 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f953a50 | file object: 0xffff94895f953ad0 | offsetby: 0x80 \Windows\System32\NetSetupShim.dll pool: 0xffff94895f953be0 | file object: 0xffff94895f953c60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f953d70 | file object: 0xffff94895f953df0 | offsetby: 0x80 \$Directory pool: 0xffff94895f954090 | file object: 0xffff94895f954110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f954220 | file object: 0xffff94895f9542a0 | offsetby: 0x80 \Windows\System32\MSAudDecMFT.dll pool: 0xffff94895f9543b0 | file object: 0xffff94895f954430 | offsetby: 0x80 \Windows\System32\mfmp4srcsnk.dll pool: 0xffff94895f954540 | file object: 0xffff94895f9545c0 | offsetby: 0x80 \Windows\System32\LockAppBroker.dll pool: 0xffff94895f9546d0 | file object: 0xffff94895f954750 | offsetby: 0x80 \Windows\System32\networkexplorer.dll pool: 0xffff94895f954860 | file object: 0xffff94895f9548e0 | offsetby: 0x80 \Windows\System32\RMapi.dll pool: 0xffff94895f9549f0 | file object: 0xffff94895f954a70 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{88F467C4-30C1-4690-AE6E-EC3A4B429143}.catalogItem pool: 0xffff94895f954b80 | file object: 0xffff94895f954c00 | offsetby: 0x80 \Windows\System32\MFMediaEngine.dll pool: 0xffff94895f954d10 | file object: 0xffff94895f954d90 | offsetby: 0x80 \Windows\System32\MFCaptureEngine.dll pool: 0xffff94895f955030 | file object: 0xffff94895f9550b0 | offsetby: 0x80 \Windows\System32\VAN.dll pool: 0xffff94895f9551c0 | file object: 0xffff94895f955240 | offsetby: 0x80 \Windows\System32\ulib.dll pool: 0xffff94895f955350 | file object: 0xffff94895f9553d0 | offsetby: 0x80 \Windows\System32\scrobj.dll pool: 0xffff94895f9554e0 | file object: 0xffff94895f955560 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{A869E114-0B89-4FF6-A4B9-22E67F654536}.catalogItem pool: 0xffff94895f955670 | file object: 0xffff94895f9556f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f955800 | file object: 0xffff94895f955880 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 pool: 0xffff94895f955990 | file object: 0xffff94895f955a10 | offsetby: 0x80 \Windows\System32\LockController.dll pool: 0xffff94895f955b20 | file object: 0xffff94895f955ba0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f955cb0 | file object: 0xffff94895f955d30 | offsetby: 0x80 \Windows\System32\prntvpt.dll pool: 0xffff94895f955e40 | file object: 0xffff94895f955ec0 | offsetby: 0x80 \Windows\System32\sxshared.dll pool: 0xffff94895f956160 | file object: 0xffff94895f9561e0 | offsetby: 0x80 \Windows\SysWOW64\duser.dll pool: 0xffff94895f9562f0 | file object: 0xffff94895f956370 | offsetby: 0x80 \Windows\System32\WebRuntimeManager.dll pool: 0xffff94895f956480 | file object: 0xffff94895f956500 | offsetby: 0x80 \Windows\System32\Windows.Graphics.Printing.dll pool: 0xffff94895f956610 | file object: 0xffff94895f956690 | offsetby: 0x80 \Windows\System32\QuickActionsDataModel.dll pool: 0xffff94895f9567a0 | file object: 0xffff94895f956820 | offsetby: 0x80 \Windows\System32\SearchFolder.dll pool: 0xffff94895f956930 | file object: 0xffff94895f9569b0 | offsetby: 0x80 \Windows\System32\SystemSettingsBroker.exe pool: 0xffff94895f956ac0 | file object: 0xffff94895f956b40 | offsetby: 0x80 \Windows\System32\Windows.ApplicationModel.LockScreen.dll pool: 0xffff94895f956c50 | file object: 0xffff94895f956cd0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f956de0 | file object: 0xffff94895f956e60 | offsetby: 0x80 \Windows\SysWOW64\atl.dll pool: 0xffff94895f957100 | file object: 0xffff94895f957180 | offsetby: 0x80 \Windows\System32\PortableDeviceClassExtension.dll pool: 0xffff94895f957290 | file object: 0xffff94895f957310 | offsetby: 0x80 \Windows\System32\WUDFHost.exe pool: 0xffff94895f957420 | file object: 0xffff94895f9574a0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{D5850D04-2AD8-4416-9BF6-507888ADD7CF}.catalogItem pool: 0xffff94895f9575b0 | file object: 0xffff94895f957630 | offsetby: 0x80 \Windows\System32\unenrollhook.dll pool: 0xffff94895f957740 | file object: 0xffff94895f9577c0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9578d0 | file object: 0xffff94895f957950 | offsetby: 0x80 \Windows\SysWOW64\avrt.dll pool: 0xffff94895f957a60 | file object: 0xffff94895f957ae0 | offsetby: 0x80 \Windows\System32\Windows.Media.Audio.dll pool: 0xffff94895f957bf0 | file object: 0xffff94895f957c70 | offsetby: 0x80 \Windows\System32\wbem\NCProv.dll pool: 0xffff94895f957d80 | file object: 0xffff94895f957e00 | offsetby: 0x80 \Windows\System32\PlayToManager.dll pool: 0xffff94895f9580a0 | file object: 0xffff94895f958120 | offsetby: 0x80 \$Directory pool: 0xffff94895f958230 | file object: 0xffff94895f9582b0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9583c0 | file object: 0xffff94895f958440 | offsetby: 0x80 \Windows\System32\VaultRoaming.dll pool: 0xffff94895f958550 | file object: 0xffff94895f9585d0 | offsetby: 0x80 \$Directory pool: 0xffff94895f9586e0 | file object: 0xffff94895f958760 | offsetby: 0x80 \Windows\System32\Windows.Media.MediaControl.dll pool: 0xffff94895f958870 | file object: 0xffff94895f9588f0 | offsetby: 0x80 \$Directory pool: 0xffff94895f958a00 | file object: 0xffff94895f958a80 | offsetby: 0x80 \Windows\System32\wbem\wbemdisp.dll pool: 0xffff94895f958b90 | file object: 0xffff94895f958c10 | offsetby: 0x80 \Windows\System32\wercplsupport.dll pool: 0xffff94895f958d20 | file object: 0xffff94895f958da0 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{C32A9813-BBF0-4F77-A36B-33B07F7B95A3}.catalogItem pool: 0xffff94895f959040 | file object: 0xffff94895f9590c0 | offsetby: 0x80 \Windows\System32\SensorsApi.dll pool: 0xffff94895f9591d0 | file object: 0xffff94895f959250 | offsetby: 0x80 \Windows\System32\RoamingSecurity.dll pool: 0xffff94895f959360 | file object: 0xffff94895f9593e0 | offsetby: 0x80 \Windows\SysWOW64\mfc42.dll pool: 0xffff94895f9594f0 | file object: 0xffff94895f959570 | offsetby: 0x80 \$Directory pool: 0xffff94895f959680 | file object: 0xffff94895f959700 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f959810 | file object: 0xffff94895f959890 | offsetby: 0x80 \Windows\System32\WMADMOE.DLL pool: 0xffff94895f9599a0 | file object: 0xffff94895f959a20 | offsetby: 0x80 \Windows\SysWOW64\Chakra.dll pool: 0xffff94895f959b30 | file object: 0xffff94895f959bb0 | offsetby: 0x80 \Windows\System32\WWAHost.exe pool: 0xffff94895f959cc0 | file object: 0xffff94895f959d40 | offsetby: 0x80 \Windows\System32\WlanRadioManager.dll pool: 0xffff94895f959e50 | file object: 0xffff94895f959ed0 | offsetby: 0x80 \Windows\System32\WindowsCodecsExt.dll pool: 0xffff94895f95a170 | file object: 0xffff94895f95a1f0 | offsetby: 0x80 \Windows\System32\WwanRadioManager.dll pool: 0xffff94895f95a300 | file object: 0xffff94895f95a380 | offsetby: 0x80 \Windows\SysWOW64\AudioSes.dll pool: 0xffff94895f95a490 | file object: 0xffff94895f95a510 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f95a620 | file object: 0xffff94895f95a6a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f95a7b0 | file object: 0xffff94895f95a830 | offsetby: 0x80 \Windows\System32\wshom.ocx pool: 0xffff94895f95a940 | file object: 0xffff94895f95a9c0 | offsetby: 0x80 \Windows\System32\XamlTileRender.dll pool: 0xffff94895f95aad0 | file object: 0xffff94895f95ab50 | offsetby: 0x80 \Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{F067CCA2-E6A3-406D-8DEB-73C1208DFC68}.catalogItem pool: 0xffff94895f95ac60 | file object: 0xffff94895f95ace0 | offsetby: 0x80 \Windows\SysWOW64\actxprxy.dll pool: 0xffff94895f95adf0 | file object: 0xffff94895f95ae70 | offsetby: 0x80 \Windows\System32\Windows.UI.Search.dll pool: 0xffff94895f95b110 | file object: 0xffff94895f95b190 | offsetby: 0x80 \Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe pool: 0xffff94895f95b2a0 | file object: 0xffff94895f95b320 | offsetby: 0x80 \Windows\SysWOW64\mfsvr.dll pool: 0xffff94895f95b430 | file object: 0xffff94895f95b4b0 | offsetby: 0x80 \Windows\System32\WwaApi.dll pool: 0xffff94895f95b5c0 | file object: 0xffff94895f95b640 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f95b750 | file object: 0xffff94895f95b7d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f95b8e0 | file object: 0xffff94895f95b960 | offsetby: 0x80 \Windows\SysWOW64\mf.dll pool: 0xffff94895f95ba70 | file object: 0xffff94895f95baf0 | offsetby: 0x80 \Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe pool: 0xffff94895f95bc00 | file object: 0xffff94895f95bc80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\XamlLanguageService\Microsoft.VisualStudio.DesignTools.XamlLanguageService.dll pool: 0xffff94895f95bd90 | file object: 0xffff94895f95be10 | offsetby: 0x80 \Windows\SysWOW64\cabinet.dll pool: 0xffff94895f95c0b0 | file object: 0xffff94895f95c130 | offsetby: 0x80 \Windows\System32\WUDFx.dll pool: 0xffff94895f95c240 | file object: 0xffff94895f95c2c0 | offsetby: 0x80 \Windows\SysWOW64\BCP47Langs.dll pool: 0xffff94895f95c3d0 | file object: 0xffff94895f95c450 | offsetby: 0x80 \Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaSpeechux.dll pool: 0xffff94895f95c560 | file object: 0xffff94895f95c5e0 | offsetby: 0x80 \Windows\SysWOW64\prnfldr.dll pool: 0xffff94895f95c6f0 | file object: 0xffff94895f95c770 | offsetby: 0x80 \Windows\SysWOW64\devrtl.dll pool: 0xffff94895f95c880 | file object: 0xffff94895f95c900 | offsetby: 0x80 \Windows\SysWOW64\cryptui.dll pool: 0xffff94895f95ca10 | file object: 0xffff94895f95ca90 | offsetby: 0x80 \Windows\System32\newdev.dll pool: 0xffff94895f95cba0 | file object: 0xffff94895f95cc20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.VS.dll pool: 0xffff94895f95cd30 | file object: 0xffff94895f95cdb0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f95d050 | file object: 0xffff94895f95d0d0 | offsetby: 0x80 \Windows\SysWOW64\msv1_0.dll pool: 0xffff94895f95d1e0 | file object: 0xffff94895f95d260 | offsetby: 0x80 \Windows\SysWOW64\RTWorkQ.dll pool: 0xffff94895f95d370 | file object: 0xffff94895f95d3f0 | offsetby: 0x80 \Windows\SysWOW64\MrmCoreR.dll pool: 0xffff94895f95d500 | file object: 0xffff94895f95d580 | offsetby: 0x80 \Windows\SysWOW64\linkinfo.dll pool: 0xffff94895f95d690 | file object: 0xffff94895f95d710 | offsetby: 0x80 \Windows\SysWOW64\devobj.dll pool: 0xffff94895f95d820 | file object: 0xffff94895f95d8a0 | offsetby: 0x80 \Windows\SysWOW64\mfc42u.dll pool: 0xffff94895f95d9b0 | file object: 0xffff94895f95da30 | offsetby: 0x80 \Windows\SysWOW64\msimg32.dll pool: 0xffff94895f95db40 | file object: 0xffff94895f95dbc0 | offsetby: 0x80 \Windows\SysWOW64\esent.dll pool: 0xffff94895f95dcd0 | file object: 0xffff94895f95dd50 | offsetby: 0x80 \Windows\SysWOW64\imgutil.dll pool: 0xffff94895f95de60 | file object: 0xffff94895f95dee0 | offsetby: 0x80 \Windows\SysWOW64\ninput.dll pool: 0xffff94895f95e180 | file object: 0xffff94895f95e200 | offsetby: 0x80 \Windows\SysWOW64\nlaapi.dll pool: 0xffff94895f95e310 | file object: 0xffff94895f95e390 | offsetby: 0x80 \Windows\SysWOW64\tquery.dll pool: 0xffff94895f95e4a0 | file object: 0xffff94895f95e520 | offsetby: 0x80 \Windows\SysWOW64\mfcore.dll pool: 0xffff94895f95e630 | file object: 0xffff94895f95e6b0 | offsetby: 0x80 \Windows\SysWOW64\dinput8.dll pool: 0xffff94895f95e7c0 | file object: 0xffff94895f95e840 | offsetby: 0x80 \Windows\SysWOW64\oleacc.dll pool: 0xffff94895f95e950 | file object: 0xffff94895f95e9d0 | offsetby: 0x80 \Windows\SysWOW64\msfeeds.dll pool: 0xffff94895f95eae0 | file object: 0xffff94895f95eb60 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f95ec70 | file object: 0xffff94895f95ecf0 | offsetby: 0x80 \Windows\SysWOW64\mfplat.dll pool: 0xffff94895f95ee00 | file object: 0xffff94895f95ee80 | offsetby: 0x80 \Windows\SysWOW64\dui70.dll pool: 0xffff94895f95f120 | file object: 0xffff94895f95f1a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f95f2b0 | file object: 0xffff94895f95f330 | offsetby: 0x80 \Windows\SysWOW64\dsound.dll pool: 0xffff94895f95f440 | file object: 0xffff94895f95f4c0 | offsetby: 0x80 \Windows\SysWOW64\MP3DMOD.DLL pool: 0xffff94895f95f5d0 | file object: 0xffff94895f95f650 | offsetby: 0x80 \Windows\SysWOW64\wdigest.dll pool: 0xffff94895f95f760 | file object: 0xffff94895f95f7e0 | offsetby: 0x80 \Windows\System32\SystemSettingsThresholdAdminFlowUI.dll pool: 0xffff94895f95f8f0 | file object: 0xffff94895f95f970 | offsetby: 0x80 \Windows\SysWOW64\Windows.UI.dll pool: 0xffff94895f95fa80 | file object: 0xffff94895f95fb00 | offsetby: 0x80 \$Directory pool: 0xffff94895f95fc10 | file object: 0xffff94895f95fc90 | offsetby: 0x80 \Windows\System32\Windows.Media.Playback.BackgroundMediaPlayer.dll pool: 0xffff94895f95fda0 | file object: 0xffff94895f95fe20 | offsetby: 0x80 \Windows\System32\SystemSettingsAdminFlows.exe pool: 0xffff94895f9600c0 | file object: 0xffff94895f960140 | offsetby: 0x80 \Windows\System32\timesync.dll pool: 0xffff94895f960250 | file object: 0xffff94895f9602d0 | offsetby: 0x80 \Windows\System32\en-US\newdev.dll.mui pool: 0xffff94895f9603e0 | file object: 0xffff94895f960460 | offsetby: 0x80 \$Directory pool: 0xffff94895f960570 | file object: 0xffff94895f9605f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f960700 | file object: 0xffff94895f960780 | offsetby: 0x80 \Windows\SysWOW64\PhotoMetadataHandler.dll pool: 0xffff94895f960890 | file object: 0xffff94895f960910 | offsetby: 0x80 \Windows\SysWOW64\wbemcomn.dll pool: 0xffff94895f960a20 | file object: 0xffff94895f960aa0 | offsetby: 0x80 \Windows\SysWOW64\Windows.Globalization.dll pool: 0xffff94895f960bb0 | file object: 0xffff94895f960c30 | offsetby: 0x80 \Windows\SysWOW64\Windows.Media.dll pool: 0xffff94895f960d40 | file object: 0xffff94895f960dc0 | offsetby: 0x80 \Windows\System32\en-US\SystemSettingsAdminFlows.exe.mui pool: 0xffff94895f961060 | file object: 0xffff94895f9610e0 | offsetby: 0x80 \Windows\SysWOW64\Windows.Media.MediaControl.dll pool: 0xffff94895f9611f0 | file object: 0xffff94895f961270 | offsetby: 0x80 \Windows\System32\Windows.Media.Playback.ProxyStub.dll pool: 0xffff94895f961380 | file object: 0xffff94895f961400 | offsetby: 0x80 \Windows\SysWOW64\UIAnimation.dll pool: 0xffff94895f961510 | file object: 0xffff94895f961590 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9616a0 | file object: 0xffff94895f961720 | offsetby: 0x80 \Windows\SysWOW64\webservices.dll pool: 0xffff94895f961830 | file object: 0xffff94895f9618b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9619c0 | file object: 0xffff94895f961a40 | offsetby: 0x80 \Windows\SysWOW64\msftedit.dll pool: 0xffff94895f961b50 | file object: 0xffff94895f961bd0 | offsetby: 0x80 \Windows\SysWOW64\Windows.Graphics.dll pool: 0xffff94895f961ce0 | file object: 0xffff94895f961d60 | offsetby: 0x80 \Windows\System32\CloudExperienceHostCommon.dll pool: 0xffff94895f961e70 | file object: 0xffff94895f961ef0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f962000 | file object: 0xffff94895f962080 | offsetby: 0x80 \Windows\SysWOW64\MMDevAPI.dll pool: 0xffff94895f962190 | file object: 0xffff94895f962210 | offsetby: 0x80 \Windows\SysWOW64\drvstore.dll pool: 0xffff94895f962320 | file object: 0xffff94895f9623a0 | offsetby: 0x80 \Windows\SysWOW64\mfmp4srcsnk.dll pool: 0xffff94895f9624b0 | file object: 0xffff94895f962530 | offsetby: 0x80 \Windows\SysWOW64\Windows.Media.Audio.dll pool: 0xffff94895f962640 | file object: 0xffff94895f9626c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9627d0 | file object: 0xffff94895f962850 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f962960 | file object: 0xffff94895f9629e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f962af0 | file object: 0xffff94895f962b70 | offsetby: 0x80 \Windows\System32\drivers\flpydisk.sys pool: 0xffff94895f962c80 | file object: 0xffff94895f962d00 | offsetby: 0x80 \Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\MicrosoftEdgeFile.targetsize-16.png8bbw pool: 0xffff94895f962e10 | file object: 0xffff94895f962e90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f963130 | file object: 0xffff94895f9631b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9632c0 | file object: 0xffff94895f963340 | offsetby: 0x80 \Windows\System32\drivers\terminpt.sys pool: 0xffff94895f963450 | file object: 0xffff94895f9634d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f9635e0 | file object: 0xffff94895f963660 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f963770 | file object: 0xffff94895f9637f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895f963900 | file object: 0xffff94895f963980 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895f963a90 | file object: 0xffff94895f963b10 | offsetby: 0x80 pool: 0xffff94895f963c20 | file object: 0xffff94895f963ca0 | offsetby: 0x80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c pool: 0xffff94895f963db0 | file object: 0xffff94895f963e30 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\extension-94135e0f95d0e9155efc18eac7b47364.code pool: 0xffff94895fe43160 | file object: 0xffff94895fe431e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe432f0 | file object: 0xffff94895fe43370 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vc38f2c7b#\f2e57c4255181688c6098454703e6ace\Microsoft.VisualStudio.Platform.WindowManagement.ni.dll.aux pool: 0xffff94895fe43480 | file object: 0xffff94895fe43500 | offsetby: 0x80 \$Directory pool: 0xffff94895fe43610 | file object: 0xffff94895fe43690 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.XsdDesignerPackage.dll pool: 0xffff94895fe437a0 | file object: 0xffff94895fe43820 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\cmddefui.dll pool: 0xffff94895fe43930 | file object: 0xffff94895fe439b0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe43ac0 | file object: 0xffff94895fe43b40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Debugger.Parallel.Gpu.dll pool: 0xffff94895fe43c50 | file object: 0xffff94895fe43cd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\en\Microsoft.VisualStudio.Debugger.Parallel.resources.dll pool: 0xffff94895fe43de0 | file object: 0xffff94895fe43e60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\cmddefui.dll pool: 0xffff94895fe44100 | file object: 0xffff94895fe44180 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\Microsoft.VisualStudio.ExportTemplateUI.dll pool: 0xffff94895fe44290 | file object: 0xffff94895fe44310 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\Microsoft.VisualStudioUI.dll pool: 0xffff94895fe44420 | file object: 0xffff94895fe444a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe445b0 | file object: 0xffff94895fe44630 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\en\Microsoft.VisualStudio.Platform.WindowManagement.resources.dll pool: 0xffff94895fe44740 | file object: 0xffff94895fe447c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Debugger.Parallel.dll pool: 0xffff94895fe448d0 | file object: 0xffff94895fe44950 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Platform.WindowManagement.dll pool: 0xffff94895fe44a60 | file object: 0xffff94895fe44ae0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe44bf0 | file object: 0xffff94895fe44c70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.XsdDesignerPackage.dll pool: 0xffff94895fe44d80 | file object: 0xffff94895fe44e00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VS SCC\1033\VssProviderui.dll pool: 0xffff94895fe450a0 | file object: 0xffff94895fe45120 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Dialogs.dll pool: 0xffff94895fe45230 | file object: 0xffff94895fe452b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Xml\1033\Microsoft.XmlEditorUI.dll pool: 0xffff94895fe453c0 | file object: 0xffff94895fe45440 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\1033\MetricsPackageUI.dll pool: 0xffff94895fe45550 | file object: 0xffff94895fe455d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\en\Microsoft.VisualStudio.Shell.UI.Internal.resources.dll pool: 0xffff94895fe456e0 | file object: 0xffff94895fe45760 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\en\Microsoft.VisualStudio.Debugger.Parallel.Gpu.resources.dll pool: 0xffff94895fe45870 | file object: 0xffff94895fe458f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\1033\Microsoft.VisualStudio.QualityTools.TestCaseManagementUI.dll pool: 0xffff94895fe45a00 | file object: 0xffff94895fe45a80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\1033\Microsoft.VisualStudio.QualityTools.Tips.TuipPackageUI.dll pool: 0xffff94895fe45b90 | file object: 0xffff94895fe45c10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Packages\1033\Htmledui.dll pool: 0xffff94895fe45d20 | file object: 0xffff94895fe45da0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe46040 | file object: 0xffff94895fe460c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe461d0 | file object: 0xffff94895fe46250 | offsetby: 0x80 \$Directory pool: 0xffff94895fe46360 | file object: 0xffff94895fe463e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Design.dll pool: 0xffff94895fe464f0 | file object: 0xffff94895fe46570 | offsetby: 0x80 \$Directory pool: 0xffff94895fe46680 | file object: 0xffff94895fe46700 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ComponentModelHost.Implementation.dll pool: 0xffff94895fe46810 | file object: 0xffff94895fe46890 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\vslogui.dll pool: 0xffff94895fe469a0 | file object: 0xffff94895fe46a20 | offsetby: 0x80 \Windows\System32\winevt\Logs\Microsoft-Windows-WER-PayloadHealth%4Operational.evtx pool: 0xffff94895fe46b30 | file object: 0xffff94895fe46bb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\1033\TfsProviderUI.dll pool: 0xffff94895fe46cc0 | file object: 0xffff94895fe46d40 | offsetby: 0x80 \$Directory pool: 0xffff94895fe46e50 | file object: 0xffff94895fe46ed0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\Microsoft.VisualStudio.DesignUI.dll pool: 0xffff94895fe47170 | file object: 0xffff94895fe471f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\1033\stanpackageui.dll pool: 0xffff94895fe47300 | file object: 0xffff94895fe47380 | offsetby: 0x80 \$Directory pool: 0xffff94895fe47490 | file object: 0xffff94895fe47510 | offsetby: 0x80 \$Directory pool: 0xffff94895fe47620 | file object: 0xffff94895fe476a0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vc1ae403b#\3c03c57713a87b7021cb5aee7432562c\Microsoft.VisualStudio.Shell.ViewManager.ni.dll.aux pool: 0xffff94895fe477b0 | file object: 0xffff94895fe47830 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Shell.ViewManager.dll pool: 0xffff94895fe47940 | file object: 0xffff94895fe479c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe47ad0 | file object: 0xffff94895fe47b50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensionManager.dll pool: 0xffff94895fe47c60 | file object: 0xffff94895fe47ce0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe47df0 | file object: 0xffff94895fe47e70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.ComponentModelHost.dll pool: 0xffff94895fe48110 | file object: 0xffff94895fe48190 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Tools\VDT\1033\vdt80ui.dll pool: 0xffff94895fe482a0 | file object: 0xffff94895fe48320 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Interop.11.0.dll pool: 0xffff94895fe48430 | file object: 0xffff94895fe484b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\envdte.dll pool: 0xffff94895fe485c0 | file object: 0xffff94895fe48640 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\envdte80.dll pool: 0xffff94895fe48750 | file object: 0xffff94895fe487d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.ExtensionEngine.dll pool: 0xffff94895fe488e0 | file object: 0xffff94895fe48960 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\VC\vcpackages\1033\reseditui.dll pool: 0xffff94895fe48a70 | file object: 0xffff94895fe48af0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Xml\1033\Microsoft.XmlEditorUI.dll pool: 0xffff94895fe48c00 | file object: 0xffff94895fe48c80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Team Tools\Performance Tools\1033\perfpkgui.dll pool: 0xffff94895fe48d90 | file object: 0xffff94895fe48e10 | offsetby: 0x80 \$Directory pool: 0xffff94895fe490b0 | file object: 0xffff94895fe49130 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\1033\Microsoft.VSDesignerUI.dll pool: 0xffff94895fe49240 | file object: 0xffff94895fe492c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe493d0 | file object: 0xffff94895fe49450 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vf617de63#\8f4c9f433e3eecc359b6151995ee9dfe\Microsoft.VisualStudio.ExtensionManager.Implementation.ni.dll.aux pool: 0xffff94895fe49560 | file object: 0xffff94895fe495e0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\StreamJsonRpc\547ef36f7c7a5b0edc7988234f027229\StreamJsonRpc.ni.dll.aux pool: 0xffff94895fe496f0 | file object: 0xffff94895fe49770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ServiceHubClient\Microsoft.ServiceHub.Framework.dll pool: 0xffff94895fe49880 | file object: 0xffff94895fe49900 | offsetby: 0x80 \$Directory pool: 0xffff94895fe49a10 | file object: 0xffff94895fe49a90 | offsetby: 0x80 \$Directory pool: 0xffff94895fe49ba0 | file object: 0xffff94895fe49c20 | offsetby: 0x80 \$Directory pool: 0xffff94895fe49d30 | file object: 0xffff94895fe49db0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Coll4a4f96a7#\b1f10bc2be176b1b7b7dc7c2a44486be\System.Collections.Immutable.ni.dll pool: 0xffff94895fe4a050 | file object: 0xffff94895fe4a0d0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.IO.Pipelines\a1cff685148503af639967a1ac912011\System.IO.Pipelines.ni.dll.aux pool: 0xffff94895fe4a1e0 | file object: 0xffff94895fe4a260 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\System.IO.Pipelines.dll pool: 0xffff94895fe4a370 | file object: 0xffff94895fe4a3f0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\StreamJsonRpc\6706ed9a623647bc3f0e1f588629dace\StreamJsonRpc.ni.dll.aux pool: 0xffff94895fe4a500 | file object: 0xffff94895fe4a580 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4a690 | file object: 0xffff94895fe4a710 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4a820 | file object: 0xffff94895fe4a8a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\StreamJsonRpc.2.x\StreamJsonRpc.dll pool: 0xffff94895fe4a9b0 | file object: 0xffff94895fe4aa30 | offsetby: 0x80 \Windows\System32\w32time.dll pool: 0xffff94895fe4ab40 | file object: 0xffff94895fe4abc0 | offsetby: 0x80 \Windows\System32\en-US\w32time.dll.mui pool: 0xffff94895fe4acd0 | file object: 0xffff94895fe4ad50 | offsetby: 0x80 \Windows\System32\WaaSMedicSvc.dll pool: 0xffff94895fe4ae60 | file object: 0xffff94895fe4aee0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Coll4a4f96a7#\b1f10bc2be176b1b7b7dc7c2a44486be\System.Collections.Immutable.ni.dll.aux pool: 0xffff94895fe4b180 | file object: 0xffff94895fe4b200 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4b310 | file object: 0xffff94895fe4b390 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.RpcContracts.dll pool: 0xffff94895fe4b4a0 | file object: 0xffff94895fe4b520 | offsetby: 0x80 \Windows\System32\winevt\Logs\microsoft-windows-diagnosis-scripted%4operational.evtx pool: 0xffff94895fe4b630 | file object: 0xffff94895fe4b6b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Collections.Immutable.dll pool: 0xffff94895fe4b7c0 | file object: 0xffff94895fe4b840 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4b950 | file object: 0xffff94895fe4b9d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4bae0 | file object: 0xffff94895fe4bb60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Threading.Tasks.Extensions.dll pool: 0xffff94895fe4bc70 | file object: 0xffff94895fe4bcf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\U-SQL\USQLProject\NewProject.png pool: 0xffff94895fe4be00 | file object: 0xffff94895fe4be80 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4c120 | file object: 0xffff94895fe4c1a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe4c2b0 | file object: 0xffff94895fe4c330 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.S0b6afd4f#\4d1686bd0446a4a28f88d066f5023c44\Microsoft.ServiceHub.Framework.ni.dll.aux pool: 0xffff94895fe4c440 | file object: 0xffff94895fe4c4c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensionManager.Implementation.dll pool: 0xffff94895fe4c5d0 | file object: 0xffff94895fe4c650 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.S0b6afd4f#\e089e372d4e480f3b3a573fee5c6d39e\Microsoft.ServiceHub.Framework.ni.dll.aux pool: 0xffff94895fe4c760 | file object: 0xffff94895fe4c7e0 | offsetby: 0x80 \Windows\System32\drprov.dll pool: 0xffff94895fe4c8f0 | file object: 0xffff94895fe4c970 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4ca80 | file object: 0xffff94895fe4cb00 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4cc10 | file object: 0xffff94895fe4cc90 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4cda0 | file object: 0xffff94895fe4ce20 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4d0c0 | file object: 0xffff94895fe4d140 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4d250 | file object: 0xffff94895fe4d2d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4d3e0 | file object: 0xffff94895fe4d460 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4d570 | file object: 0xffff94895fe4d5f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe4d700 | file object: 0xffff94895fe4d780 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4d890 | file object: 0xffff94895fe4d910 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics Edge\ASAEdgeEmptyProject\ASAEdgeEmptyProject.png pool: 0xffff94895fe4da20 | file object: 0xffff94895fe4daa0 | offsetby: 0x80 \Windows\System32\p9np.dll pool: 0xffff94895fe4dbb0 | file object: 0xffff94895fe4dc30 | offsetby: 0x80 \Windows\System32\davclnt.dll pool: 0xffff94895fe4dd40 | file object: 0xffff94895fe4ddc0 | offsetby: 0x80 \Windows\System32\davhlpr.dll pool: 0xffff94895fe4e060 | file object: 0xffff94895fe4e0e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4e1f0 | file object: 0xffff94895fe4e270 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4e380 | file object: 0xffff94895fe4e400 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4e510 | file object: 0xffff94895fe4e590 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4e6a0 | file object: 0xffff94895fe4e720 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4e830 | file object: 0xffff94895fe4e8b0 | offsetby: 0x80 \Windows\System32\en-US\mpr.dll.mui pool: 0xffff94895fe4e9c0 | file object: 0xffff94895fe4ea40 | offsetby: 0x80 \Windows\System32\ntlanman.dll pool: 0xffff94895fe4eb50 | file object: 0xffff94895fe4ebd0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4ece0 | file object: 0xffff94895fe4ed60 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-B25CCDFF.pf pool: 0xffff94895fe4ee70 | file object: 0xffff94895fe4eef0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4f000 | file object: 0xffff94895fe4f080 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\ProjectTemplates\CSharp\Cloud\1033\Kube.ProjectTemplate\Kube.ProjectTemplate.ico pool: 0xffff94895fe4f190 | file object: 0xffff94895fe4f210 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Setup.Common.dll pool: 0xffff94895fe4f320 | file object: 0xffff94895fe4f3a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4f4b0 | file object: 0xffff94895fe4f530 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4f640 | file object: 0xffff94895fe4f6c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4f7d0 | file object: 0xffff94895fe4f850 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\gulp\package.json pool: 0xffff94895fe4f960 | file object: 0xffff94895fe4f9e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4faf0 | file object: 0xffff94895fe4fb70 | offsetby: 0x80 \$Directory pool: 0xffff94895fe4fc80 | file object: 0xffff94895fe4fd00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ScopeStudio.VsExtension.EditorMarginExtension.SqlIP.dll pool: 0xffff94895fe4fe10 | file object: 0xffff94895fe4fe90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.Internal.VisualStudio.UserNotifications.dll pool: 0xffff94895fe50130 | file object: 0xffff94895fe501b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Newtonsoft.Json.12.0.0.2\Newtonsoft.Json.dll pool: 0xffff94895fe502c0 | file object: 0xffff94895fe50340 | offsetby: 0x80 \Windows\SysWOW64\sfc.dll pool: 0xffff94895fe50450 | file object: 0xffff94895fe504d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe505e0 | file object: 0xffff94895fe50660 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics Edge\ASAEdgeProject\ASAEdgeProject.png pool: 0xffff94895fe50770 | file object: 0xffff94895fe507f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics\ASACustomDeserializerProject\ASACustomDeserializerProject.png pool: 0xffff94895fe50900 | file object: 0xffff94895fe50980 | offsetby: 0x80 \$Directory pool: 0xffff94895fe50a90 | file object: 0xffff94895fe50b10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\U-SQL\USqlScriptUnitTestProject\NewProject.png pool: 0xffff94895fe50c20 | file object: 0xffff94895fe50ca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ClientDiagnostics\AppAnalysis\Microsoft.VisualStudio.AppAnalysis.dll pool: 0xffff94895fe50db0 | file object: 0xffff94895fe50e30 | offsetby: 0x80 \$Directory pool: 0xffff94895fe510d0 | file object: 0xffff94895fe51150 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll pool: 0xffff94895fe51260 | file object: 0xffff94895fe512e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Setup.dll pool: 0xffff94895fe513f0 | file object: 0xffff94895fe51470 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.Implementation.VS.dll pool: 0xffff94895fe51580 | file object: 0xffff94895fe51600 | offsetby: 0x80 \$Directory pool: 0xffff94895fe51710 | file object: 0xffff94895fe51790 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics\ASAEmptyProject\ASAEmptyProject.png pool: 0xffff94895fe518a0 | file object: 0xffff94895fe51920 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\79575eb34b7c2af676d17dabc88187ca\Newtonsoft.Json.ni.dll pool: 0xffff94895fe51a30 | file object: 0xffff94895fe51ab0 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-5AC380EC.pf pool: 0xffff94895fe51bc0 | file object: 0xffff94895fe51c40 | offsetby: 0x80 \$Directory pool: 0xffff94895fe51d50 | file object: 0xffff94895fe51dd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensibilityHosting.dll pool: 0xffff94895fe52070 | file object: 0xffff94895fe520f0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll pool: 0xffff94895fe52200 | file object: 0xffff94895fe52280 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NavigateTo\Microsoft.VisualStudio.Language.NavigateTo.Interfaces.dll pool: 0xffff94895fe52390 | file object: 0xffff94895fe52410 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll pool: 0xffff94895fe52520 | file object: 0xffff94895fe525a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.Common.dll pool: 0xffff94895fe526b0 | file object: 0xffff94895fe52730 | offsetby: 0x80 \$Directory pool: 0xffff94895fe52840 | file object: 0xffff94895fe528c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe529d0 | file object: 0xffff94895fe52a50 | offsetby: 0x80 \$Directory pool: 0xffff94895fe52b60 | file object: 0xffff94895fe52be0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\KeyVault\Microsoft.VisualStudio.ConnectedServices.Azure.KeyVault.dll pool: 0xffff94895fe52cf0 | file object: 0xffff94895fe52d70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\en\Microsoft.VisualStudio.Imaging.resources.dll pool: 0xffff94895fe53010 | file object: 0xffff94895fe53090 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Performance Tools\Microsoft.VisualStudio.PerformanceTools.EditorIntegration.dll pool: 0xffff94895fe531a0 | file object: 0xffff94895fe53220 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\CodeSense\Framework\Microsoft.VisualStudio.CodeSense.Roslyn.dll pool: 0xffff94895fe53330 | file object: 0xffff94895fe533b0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Refl9556d6ea#\9943da38a32d2336e378c7214dd4e09a\System.Reflection.Metadata.ni.dll.aux pool: 0xffff94895fe534c0 | file object: 0xffff94895fe53540 | offsetby: 0x80 \Windows\SysWOW64\sfc_os.dll pool: 0xffff94895fe53650 | file object: 0xffff94895fe536d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe537e0 | file object: 0xffff94895fe53860 | offsetby: 0x80 \Windows\System32\en-US\wer.dll.mui pool: 0xffff94895fe53970 | file object: 0xffff94895fe539f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe53b00 | file object: 0xffff94895fe53b80 | offsetby: 0x80 \$Directory pool: 0xffff94895fe53c90 | file object: 0xffff94895fe53d10 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Refl9556d6ea#\9943da38a32d2336e378c7214dd4e09a\System.Reflection.Metadata.ni.dll pool: 0xffff94895fe53e20 | file object: 0xffff94895fe53ea0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Html.Editor.dll pool: 0xffff94895fe54140 | file object: 0xffff94895fe541c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.Features.dll pool: 0xffff94895fe542d0 | file object: 0xffff94895fe54350 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.CPS.VS.dll pool: 0xffff94895fe54460 | file object: 0xffff94895fe544e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TypeScript\Microsoft.CodeAnalysis.TypeScript.EditorFeatures.dll pool: 0xffff94895fe545f0 | file object: 0xffff94895fe54670 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.Editor.Razor.dll pool: 0xffff94895fe54780 | file object: 0xffff94895fe54800 | offsetby: 0x80 \$Directory pool: 0xffff94895fe54910 | file object: 0xffff94895fe54990 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\TreeNavigation\GraphProvider\Microsoft.VisualStudio.Shell.TreeNavigation.GraphProvider.dll pool: 0xffff94895fe54aa0 | file object: 0xffff94895fe54b20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\ParallelDebugger\Microsoft.VisualStudio.Debugger.Parallel.Extension.dll pool: 0xffff94895fe54c30 | file object: 0xffff94895fe54cb0 | offsetby: 0x80 \Windows\Prefetch\SVCHOST.EXE-80F4A784.pf pool: 0xffff94895fe54dc0 | file object: 0xffff94895fe54e40 | offsetby: 0x80 \Windows\SysWOW64\wermgr.exe pool: 0xffff94895fe550e0 | file object: 0xffff94895fe55160 | offsetby: 0x80 \$Directory pool: 0xffff94895fe55270 | file object: 0xffff94895fe552f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Collections.Immutable.dll pool: 0xffff94895fe55400 | file object: 0xffff94895fe55480 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Reflection.Metadata.dll pool: 0xffff94895fe55590 | file object: 0xffff94895fe55610 | offsetby: 0x80 \Windows\System32\wersvc.dll pool: 0xffff94895fe55720 | file object: 0xffff94895fe557a0 | offsetby: 0x80 \Windows\System32\en-US\wersvc.dll.mui pool: 0xffff94895fe558b0 | file object: 0xffff94895fe55930 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics\ASAUDFProject\ASAUDFProject.png pool: 0xffff94895fe55a40 | file object: 0xffff94895fe55ac0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe55bd0 | file object: 0xffff94895fe55c50 | offsetby: 0x80 \$Directory pool: 0xffff94895fe55d60 | file object: 0xffff94895fe55de0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Deployment Project\Microsoft.VisualStudio.Azure.Deployment.dll pool: 0xffff94895fe56080 | file object: 0xffff94895fe56100 | offsetby: 0x80 \Windows\System32\Faultrep.dll pool: 0xffff94895fe56210 | file object: 0xffff94895fe56290 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.EditorFeatures.Text.dll pool: 0xffff94895fe563a0 | file object: 0xffff94895fe56420 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Diagnostics.Common.dll pool: 0xffff94895fe56530 | file object: 0xffff94895fe565b0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe566c0 | file object: 0xffff94895fe56740 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Extensions.dll pool: 0xffff94895fe56850 | file object: 0xffff94895fe568d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Shared.Editor.dll pool: 0xffff94895fe569e0 | file object: 0xffff94895fe56a60 | offsetby: 0x80 \$Directory pool: 0xffff94895fe56b70 | file object: 0xffff94895fe56bf0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe56d00 | file object: 0xffff94895fe56d80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\DotNetObjectAlloc\Microsoft.DiagnosticsHub.DotNetObjectAllocation.dll pool: 0xffff94895fe57020 | file object: 0xffff94895fe570a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe571b0 | file object: 0xffff94895fe57230 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ProjectServices\Microsoft.VisualStudio.ProjectServices.dll pool: 0xffff94895fe57340 | file object: 0xffff94895fe573c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe574d0 | file object: 0xffff94895fe57550 | offsetby: 0x80 \$Directory pool: 0xffff94895fe57660 | file object: 0xffff94895fe576e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.EditorFeatures.dll pool: 0xffff94895fe577f0 | file object: 0xffff94895fe57870 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.Data.dll pool: 0xffff94895fe57980 | file object: 0xffff94895fe57a00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Diagnostics.HubExtensions.dll pool: 0xffff94895fe57b10 | file object: 0xffff94895fe57b90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\U-SQL\USQLSampleProject\__TemplateIcon.png pool: 0xffff94895fe57ca0 | file object: 0xffff94895fe57d20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ErrorList\Microsoft.VisualStudio.ErrorListPkg.dll pool: 0xffff94895fe57e30 | file object: 0xffff94895fe57eb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Architecture Tools\Providers\Solution\Microsoft.VisualStudio.Progression.VSProvider.dll pool: 0xffff94895fe58150 | file object: 0xffff94895fe581d0 | offsetby: 0x80 \Windows\WinSxS\FileMaps\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms pool: 0xffff94895fe582e0 | file object: 0xffff94895fe58360 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.HostingProvider.AzureDevOps.dll pool: 0xffff94895fe58470 | file object: 0xffff94895fe584f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.VersionControl.Controls.dll pool: 0xffff94895fe58600 | file object: 0xffff94895fe58680 | offsetby: 0x80 \$Directory pool: 0xffff94895fe58790 | file object: 0xffff94895fe58810 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.Logic.dll pool: 0xffff94895fe58920 | file object: 0xffff94895fe589a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Language.Intellisense.dll pool: 0xffff94895fe58ab0 | file object: 0xffff94895fe58b30 | offsetby: 0x80 \Windows\System32\sfc.dll pool: 0xffff94895fe58c40 | file object: 0xffff94895fe58cc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.UI.Wpf.dll pool: 0xffff94895fe58dd0 | file object: 0xffff94895fe58e50 | offsetby: 0x80 \$Directory pool: 0xffff94895fe590f0 | file object: 0xffff94895fe59170 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.PackageManagement.dll pool: 0xffff94895fe59280 | file object: 0xffff94895fe59300 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Azure.Fabric.ApplicationProject.dll pool: 0xffff94895fe59410 | file object: 0xffff94895fe59490 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Web\ASPX\Microsoft.VisualStudio.Web.HTML.Implementation.dll pool: 0xffff94895fe595a0 | file object: 0xffff94895fe59620 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools Diagnostics\Microsoft.VisualStudio.WindowsAzure.AzureDiagnostics.dll pool: 0xffff94895fe59730 | file object: 0xffff94895fe597b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.Console.dll pool: 0xffff94895fe598c0 | file object: 0xffff94895fe59940 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.ExternalAccess.Debugger.dll pool: 0xffff94895fe59a50 | file object: 0xffff94895fe59ad0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.CodeReview.Components.dll pool: 0xffff94895fe59be0 | file object: 0xffff94895fe59c60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.ContextManagement.Package.dll pool: 0xffff94895fe59d70 | file object: 0xffff94895fe59df0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.VersionControl.dll pool: 0xffff94895fe5a090 | file object: 0xffff94895fe5a110 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.LanguageServer.Client.dll pool: 0xffff94895fe5a220 | file object: 0xffff94895fe5a2a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.DesignTools.XamlLanguageServiceBase.dll pool: 0xffff94895fe5a3b0 | file object: 0xffff94895fe5a430 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\WebJobs\Microsoft.WebTools.Azure.WebJobs.dll pool: 0xffff94895fe5a540 | file object: 0xffff94895fe5a5c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Build.Controls.dll pool: 0xffff94895fe5a6d0 | file object: 0xffff94895fe5a750 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5a860 | file object: 0xffff94895fe5a8e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5a9f0 | file object: 0xffff94895fe5aa70 | offsetby: 0x80 \Windows\System32\WerFault.exe pool: 0xffff94895fe5ab80 | file object: 0xffff94895fe5ac00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Controls.dll pool: 0xffff94895fe5ad10 | file object: 0xffff94895fe5ad90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.EditorFeatures.Wpf.dll pool: 0xffff94895fe5b030 | file object: 0xffff94895fe5b0b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\em3ozjcu.15r\BoostTestAdapter.dll pool: 0xffff94895fe5b1c0 | file object: 0xffff94895fe5b240 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\VsDebugPresentationPackage.dll pool: 0xffff94895fe5b350 | file object: 0xffff94895fe5b3d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\UniversalFlavor\Microsoft.VisualStudio.UniversalLibrary.dll pool: 0xffff94895fe5b4e0 | file object: 0xffff94895fe5b560 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Tools.dll pool: 0xffff94895fe5b670 | file object: 0xffff94895fe5b6f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.LanguageServer.Protocol.dll pool: 0xffff94895fe5b800 | file object: 0xffff94895fe5b880 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5b990 | file object: 0xffff94895fe5ba10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Shared.VS.dll pool: 0xffff94895fe5bb20 | file object: 0xffff94895fe5bba0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TypeScript\Microsoft.VisualStudio.LanguageServices.TypeScript.dll pool: 0xffff94895fe5bcb0 | file object: 0xffff94895fe5bd30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web\Mvc\Scaffolding\Microsoft.AspNet.Scaffolding.Mvc.5.0.dll pool: 0xffff94895fe5be40 | file object: 0xffff94895fe5bec0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5c160 | file object: 0xffff94895fe5c1e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.ExternalAccess.Apex.dll pool: 0xffff94895fe5c2f0 | file object: 0xffff94895fe5c370 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\DataDesign\Microsoft.VisualStudio.DataDesign.DataSourceProviders.dll pool: 0xffff94895fe5c480 | file object: 0xffff94895fe5c500 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.Editor.dll pool: 0xffff94895fe5c610 | file object: 0xffff94895fe5c690 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5c7a0 | file object: 0xffff94895fe5c820 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CrossRepositorySearch\Microsoft.VisualStudio.CrossRepositorySearch.dll pool: 0xffff94895fe5c930 | file object: 0xffff94895fe5c9b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Scaffolding\Microsoft.WebTools.Scaffolding.Shared.dll pool: 0xffff94895fe5cac0 | file object: 0xffff94895fe5cb40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Web\Exports\Microsoft.VisualStudio.Web.Exports.dll pool: 0xffff94895fe5cc50 | file object: 0xffff94895fe5ccd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Resource Manager\Microsoft.VisualStudio.Azure.ResourceManager.Extensions.dll pool: 0xffff94895fe5cde0 | file object: 0xffff94895fe5ce60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Core.dll pool: 0xffff94895fe5d100 | file object: 0xffff94895fe5d180 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.CodingConventions.dll pool: 0xffff94895fe5d290 | file object: 0xffff94895fe5d310 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.VS.dll pool: 0xffff94895fe5d420 | file object: 0xffff94895fe5d4a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ScopeStudio.VsExtension.EditorMarginExtension.Pig.dll pool: 0xffff94895fe5d5b0 | file object: 0xffff94895fe5d630 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Platform.VSEditor.dll pool: 0xffff94895fe5d740 | file object: 0xffff94895fe5d7c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.CodeAnalysis.Razor.Workspaces.dll pool: 0xffff94895fe5d8d0 | file object: 0xffff94895fe5d950 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGetConsole.Host.PowerShell.dll pool: 0xffff94895fe5da60 | file object: 0xffff94895fe5dae0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.VisualBasic.Features.dll pool: 0xffff94895fe5dbf0 | file object: 0xffff94895fe5dc70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Microsoft Office 365 Connected Service\Microsoft.VisualStudio.Office365.dll pool: 0xffff94895fe5dd80 | file object: 0xffff94895fe5de00 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5e0a0 | file object: 0xffff94895fe5e120 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.SharePointReporting.dll pool: 0xffff94895fe5e230 | file object: 0xffff94895fe5e2b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Extensions.Shared.dll pool: 0xffff94895fe5e3c0 | file object: 0xffff94895fe5e440 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe5e550 | file object: 0xffff94895fe5e5d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5e6e0 | file object: 0xffff94895fe5e760 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LanguageServices.Razor.dll pool: 0xffff94895fe5e870 | file object: 0xffff94895fe5e8f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Modeling\16.0\Microsoft.VisualStudio.Modeling.Components.15.0.dll pool: 0xffff94895fe5ea00 | file object: 0xffff94895fe5ea80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.SolutionRestoreManager.dll pool: 0xffff94895fe5eb90 | file object: 0xffff94895fe5ec10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.Implementation.dll pool: 0xffff94895fe5ed20 | file object: 0xffff94895fe5eda0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Interfaces.dll pool: 0xffff94895fe5f040 | file object: 0xffff94895fe5f0c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ClientTools.CommonVSServiceWrapper.15.0.dll pool: 0xffff94895fe5f1d0 | file object: 0xffff94895fe5f250 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\SourceBasedTestDiscovery\Microsoft.CodeAnalysis.UnitTesting.SourceBasedTestDiscovery.dll pool: 0xffff94895fe5f360 | file object: 0xffff94895fe5f3e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5f4f0 | file object: 0xffff94895fe5f570 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5f680 | file object: 0xffff94895fe5f700 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.dll pool: 0xffff94895fe5f810 | file object: 0xffff94895fe5f890 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Shell.UI.Internal.dll pool: 0xffff94895fe5f9a0 | file object: 0xffff94895fe5fa20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Environments\Microsoft.WebTools.Environments.VS.dll pool: 0xffff94895fe5fb30 | file object: 0xffff94895fe5fbb0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe5fcc0 | file object: 0xffff94895fe5fd40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.PackageManagement.VisualStudio.dll pool: 0xffff94895fe5fe50 | file object: 0xffff94895fe5fed0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CodeAnalysis\Microsoft.VisualStudio.CodeAnalysis.VCPlugin.dll pool: 0xffff94895fe60170 | file object: 0xffff94895fe601f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Database\Microsoft.DiagnosticsHub.DatabaseTool.dll pool: 0xffff94895fe60300 | file object: 0xffff94895fe60380 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ReferenceManager\Microsoft.VisualStudio.ReferenceManager.Providers.dll pool: 0xffff94895fe60490 | file object: 0xffff94895fe60510 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.Workspaces.dll pool: 0xffff94895fe60620 | file object: 0xffff94895fe606a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\LanguageServer\Microsoft.VisualStudio.LanguageServer.Client.Implementation.dll pool: 0xffff94895fe607b0 | file object: 0xffff94895fe60830 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\XamlLanguageService\Microsoft.VisualStudio.DesignTools.XamlLanguageService.dll pool: 0xffff94895fe60940 | file object: 0xffff94895fe609c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NavigateTo\Microsoft.VisualStudio.Language.NavigateTo.Interfaces.dll pool: 0xffff94895fe60ad0 | file object: 0xffff94895fe60b50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Web\Razor\v3.0\Microsoft.WebTools.Languages.Razor.3.dll pool: 0xffff94895fe60c60 | file object: 0xffff94895fe60ce0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe60df0 | file object: 0xffff94895fe60e70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Razor\v4.0\Microsoft.WebTools.Languages.Razor.Core.dll pool: 0xffff94895fe61110 | file object: 0xffff94895fe61190 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.HostingProvider.GitHub.dll pool: 0xffff94895fe612a0 | file object: 0xffff94895fe61320 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\CPUSampling\Microsoft.DiagnosticsHub.CpuSampling.dll pool: 0xffff94895fe61430 | file object: 0xffff94895fe614b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\InteractiveWindow\Microsoft.VisualStudio.InteractiveWindow.dll pool: 0xffff94895fe615c0 | file object: 0xffff94895fe61640 | offsetby: 0x80 \$Directory pool: 0xffff94895fe61750 | file object: 0xffff94895fe617d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Scaffolding\Microsoft.WebTools.Scaffolding.Core.dll pool: 0xffff94895fe618e0 | file object: 0xffff94895fe61960 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.ExternalAccess.FSharp.dll pool: 0xffff94895fe61a70 | file object: 0xffff94895fe61af0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.CommonIDE.dll pool: 0xffff94895fe61c00 | file object: 0xffff94895fe61c80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.Build.dll pool: 0xffff94895fe61d90 | file object: 0xffff94895fe61e10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.Compose.dll pool: 0xffff94895fe620b0 | file object: 0xffff94895fe62130 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\Storage\Microsoft.VisualStudio.ConnectedServices.Azure.Storage.dll pool: 0xffff94895fe62240 | file object: 0xffff94895fe622c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\txxba55a.20s\Microsoft.VisualStudio.DevOps.Contract.dll pool: 0xffff94895fe623d0 | file object: 0xffff94895fe62450 | offsetby: 0x80 \$Directory pool: 0xffff94895fe62560 | file object: 0xffff94895fe625e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.dll pool: 0xffff94895fe626f0 | file object: 0xffff94895fe62770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.Logic.dll pool: 0xffff94895fe62880 | file object: 0xffff94895fe62900 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\TemplateEngine\Microsoft.VisualStudio.TemplateEngine.Wizard.dll pool: 0xffff94895fe62a10 | file object: 0xffff94895fe62a90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Diff.dll pool: 0xffff94895fe62ba0 | file object: 0xffff94895fe62c20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.Implementation.dll pool: 0xffff94895fe62d30 | file object: 0xffff94895fe62db0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.Shared.dll pool: 0xffff94895fe63050 | file object: 0xffff94895fe630d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.VS.dll pool: 0xffff94895fe631e0 | file object: 0xffff94895fe63260 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CrossRepositorySearch\Microsoft.VisualStudio.Platform.CrossRepositorySearch.Implementation.dll pool: 0xffff94895fe63370 | file object: 0xffff94895fe633f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Editor\Microsoft.VisualC.Editor.Implementation.dll pool: 0xffff94895fe63500 | file object: 0xffff94895fe63580 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V8f714998#\5f5f47935425aabde94941695a79c961\Microsoft.VisualStudio.Language.Intellisense.ni.dll.aux pool: 0xffff94895fe63690 | file object: 0xffff94895fe63710 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Stream Analytics\ASAProject\ASAProject.png pool: 0xffff94895fe63820 | file object: 0xffff94895fe638a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe639b0 | file object: 0xffff94895fe63a30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Editor.dll pool: 0xffff94895fe63b40 | file object: 0xffff94895fe63bc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\EventsViewer\Microsoft.DiagnosticsHub.EventsViewerTool.dll pool: 0xffff94895fe63cd0 | file object: 0xffff94895fe63d50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Platform.SearchProviders.dll pool: 0xffff94895fe63e60 | file object: 0xffff94895fe63ee0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.Controls.dll pool: 0xffff94895fe64180 | file object: 0xffff94895fe64200 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.CodeReview.Controls.dll pool: 0xffff94895fe64310 | file object: 0xffff94895fe64390 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ScopeStudio.VsExtension.EditorMarginExtension.TypeScript.dll pool: 0xffff94895fe644a0 | file object: 0xffff94895fe64520 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vc7739fa8#\d8422e9cf10153b868dbe1d3665eb348\Microsoft.VisualStudio.Text.Logic.ni.dll.aux pool: 0xffff94895fe64630 | file object: 0xffff94895fe646b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.Delta.UI.dll pool: 0xffff94895fe647c0 | file object: 0xffff94895fe64840 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\HIVE (HDInsight)\HiveProject\HiveProject.png pool: 0xffff94895fe64950 | file object: 0xffff94895fe649d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe64ae0 | file object: 0xffff94895fe64b60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\DiagnosticsHub\Microsoft.DiagnosticsHub.Runtime.dll pool: 0xffff94895fe64c70 | file object: 0xffff94895fe64cf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Client.dll pool: 0xffff94895fe64e00 | file object: 0xffff94895fe64e80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.UI.dll pool: 0xffff94895fe65120 | file object: 0xffff94895fe651a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\Vsix\Microsoft.VisualStudio.Data.Tools.Delta.dll pool: 0xffff94895fe652b0 | file object: 0xffff94895fe65330 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\InteractiveWindow\Microsoft.VisualStudio.VsInteractiveWindow.dll pool: 0xffff94895fe65440 | file object: 0xffff94895fe654c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe655d0 | file object: 0xffff94895fe65650 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\TemplateEngine\Microsoft.VisualStudio.TemplateEngine.VS.dll pool: 0xffff94895fe65760 | file object: 0xffff94895fe657e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\IntelliCodeCpp.dll pool: 0xffff94895fe658f0 | file object: 0xffff94895fe65970 | offsetby: 0x80 \$Directory pool: 0xffff94895fe65a80 | file object: 0xffff94895fe65b00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ComponentModelHost.Implementation.dll pool: 0xffff94895fe65c10 | file object: 0xffff94895fe65c90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\DataDesign\Microsoft.VisualStudio.DataDesign.DataObjectGenerators.dll pool: 0xffff94895fe65da0 | file object: 0xffff94895fe65e20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Microsoft.Cct.MobileApps.WebExtensions.dll pool: 0xffff94895fe660c0 | file object: 0xffff94895fe66140 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ProjectSystemQuery\Microsoft.VisualStudio.ProjectSystem.Query.dll pool: 0xffff94895fe66250 | file object: 0xffff94895fe662d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.CppUnitTestExtension.dll pool: 0xffff94895fe663e0 | file object: 0xffff94895fe66460 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\NavigateTo\FileProvider\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.dll pool: 0xffff94895fe66570 | file object: 0xffff94895fe665f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe66700 | file object: 0xffff94895fe66780 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LiveShare.Razor.dll pool: 0xffff94895fe66890 | file object: 0xffff94895fe66910 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.CoreUtility.dll pool: 0xffff94895fe66a20 | file object: 0xffff94895fe66aa0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.Implementation.dll pool: 0xffff94895fe66bb0 | file object: 0xffff94895fe66c30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.dll pool: 0xffff94895fe66d40 | file object: 0xffff94895fe66dc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Html.LanguageServer.InProc.dll pool: 0xffff94895fe67060 | file object: 0xffff94895fe670e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.Provider.dll pool: 0xffff94895fe671f0 | file object: 0xffff94895fe67270 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Azure.Fabric.Shared.dll pool: 0xffff94895fe67380 | file object: 0xffff94895fe67400 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vc03598f6#\4be44b39853cd8edb69e65a12544955f\Microsoft.VisualStudio.Text.Data.ni.dll.aux pool: 0xffff94895fe67510 | file object: 0xffff94895fe67590 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe676a0 | file object: 0xffff94895fe67720 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\Microsoft.VisualStudio.Language.CallHierarchy.dll pool: 0xffff94895fe67830 | file object: 0xffff94895fe678b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Architecture Tools\Providers\ManagedProvider\Microsoft.VisualStudio.Progression.ManagedProvider.dll pool: 0xffff94895fe679c0 | file object: 0xffff94895fe67a40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ManagedProjectSystem\Microsoft.VisualStudio.ProjectSystem.Managed.dll pool: 0xffff94895fe67b50 | file object: 0xffff94895fe67bd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Azure.Fabric.DockerPackage.dll pool: 0xffff94895fe67ce0 | file object: 0xffff94895fe67d60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Scaffolding\Microsoft.AspNet.Scaffolding.EntityFramework.12.0.dll pool: 0xffff94895fe67e70 | file object: 0xffff94895fe67ef0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.DotNetCore.dll pool: 0xffff94895fe68000 | file object: 0xffff94895fe68080 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.Impl.dll pool: 0xffff94895fe68190 | file object: 0xffff94895fe68210 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Publish.dll pool: 0xffff94895fe68320 | file object: 0xffff94895fe683a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.dll pool: 0xffff94895fe684b0 | file object: 0xffff94895fe68530 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LanguageServerClient.Razor.dll pool: 0xffff94895fe68640 | file object: 0xffff94895fe686c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Merge.dll pool: 0xffff94895fe687d0 | file object: 0xffff94895fe68850 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\DotNetAsync\Microsoft.DiagnosticsHub.DotNetAsync.dll pool: 0xffff94895fe68960 | file object: 0xffff94895fe689e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\Microsoft.VisualStudio.Language.CallHierarchy.Implementation.dll pool: 0xffff94895fe68af0 | file object: 0xffff94895fe68b70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.WorkItemTracking.dll pool: 0xffff94895fe68c80 | file object: 0xffff94895fe68d00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\XamlDiagnostics\Microsoft.VisualStudio.DesignTools.Diagnostics.dll pool: 0xffff94895fe68e10 | file object: 0xffff94895fe68e90 | offsetby: 0x80 \$Directory pool: 0xffff94895fe69130 | file object: 0xffff94895fe691b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.LiveShare.dll pool: 0xffff94895fe692c0 | file object: 0xffff94895fe69340 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.LanguageService.dll pool: 0xffff94895fe69450 | file object: 0xffff94895fe694d0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V246d69f4#\73ebaad9130d947484de0867b156598c\Microsoft.VisualStudio.Editor.ni.dll.aux pool: 0xffff94895fe695e0 | file object: 0xffff94895fe69660 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\TreeNavigation\Microsoft.VisualStudio.Shell.TreeNavigation.HierarchyProvider.dll pool: 0xffff94895fe69770 | file object: 0xffff94895fe697f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Composition.AttributedModel.dll pool: 0xffff94895fe69900 | file object: 0xffff94895fe69980 | offsetby: 0x80 \$Directory pool: 0xffff94895fe69a90 | file object: 0xffff94895fe69b10 | offsetby: 0x80 \$Directory pool: 0xffff94895fe69c20 | file object: 0xffff94895fe69ca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.EditorFeatures.Wpf.dll pool: 0xffff94895fe69db0 | file object: 0xffff94895fe69e30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.VSTest.dll pool: 0xffff94895fe6a0d0 | file object: 0xffff94895fe6a150 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Search.Implementation.dll pool: 0xffff94895fe6a260 | file object: 0xffff94895fe6a2e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\RemoteDebugger\Microsoft.VisualStudio.WindowsAzure.RemoteDebugger.dll pool: 0xffff94895fe6a3f0 | file object: 0xffff94895fe6a470 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.MSTest.TestWindow.dll pool: 0xffff94895fe6a580 | file object: 0xffff94895fe6a600 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6a710 | file object: 0xffff94895fe6a790 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.Xaml.dll pool: 0xffff94895fe6a8a0 | file object: 0xffff94895fe6a920 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6aa30 | file object: 0xffff94895fe6aab0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.Workspaces.dll pool: 0xffff94895fe6abc0 | file object: 0xffff94895fe6ac40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\HIVE (HDInsight)\HiveSample\HiveSampleProject.png pool: 0xffff94895fe6ad50 | file object: 0xffff94895fe6add0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\Microsoft.VisualStudio.IntelliCode.TypeScript.dll pool: 0xffff94895fe6b070 | file object: 0xffff94895fe6b0f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\TestExplorer\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.TestProvider.dll pool: 0xffff94895fe6b200 | file object: 0xffff94895fe6b280 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.DotNetFramework.dll pool: 0xffff94895fe6b390 | file object: 0xffff94895fe6b410 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Project\Microsoft.VisualStudio.ProjectSystem.Implementation.dll pool: 0xffff94895fe6b520 | file object: 0xffff94895fe6b5a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Environments\Microsoft.WebTools.Environments.dll pool: 0xffff94895fe6b6b0 | file object: 0xffff94895fe6b730 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Library Manager\Microsoft.Web.LibraryManager.dll pool: 0xffff94895fe6b840 | file object: 0xffff94895fe6b8c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.dll pool: 0xffff94895fe6b9d0 | file object: 0xffff94895fe6ba50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\VsDebugCoreUI.dll pool: 0xffff94895fe6bb60 | file object: 0xffff94895fe6bbe0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.Web.VS.dll pool: 0xffff94895fe6bcf0 | file object: 0xffff94895fe6bd70 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6c010 | file object: 0xffff94895fe6c090 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\vsdebug.imagemanifest pool: 0xffff94895fe6c1a0 | file object: 0xffff94895fe6c220 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll pool: 0xffff94895fe6c330 | file object: 0xffff94895fe6c3b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.dll pool: 0xffff94895fe6c4c0 | file object: 0xffff94895fe6c540 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.SolutionExplorer.dll pool: 0xffff94895fe6c650 | file object: 0xffff94895fe6c6d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.VisualBasic.dll pool: 0xffff94895fe6c7e0 | file object: 0xffff94895fe6c860 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.dll pool: 0xffff94895fe6c970 | file object: 0xffff94895fe6c9f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Azure.Fabric.ApplicationInsights.dll pool: 0xffff94895fe6cb00 | file object: 0xffff94895fe6cb80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Architecture Tools\Providers\NativeCode\Microsoft.VisualStudio.Progression.Native.CodeProvider.dll pool: 0xffff94895fe6cc90 | file object: 0xffff94895fe6cd10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\LanguageServer\Microsoft.VisualStudio.VC.LanguageServer.dll pool: 0xffff94895fe6ce20 | file object: 0xffff94895fe6cea0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Dialogs.dll pool: 0xffff94895fe6d140 | file object: 0xffff94895fe6d1c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.CodeReview.dll pool: 0xffff94895fe6d2d0 | file object: 0xffff94895fe6d350 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.TeamFoundation.NuGetCredentialProvider.dll pool: 0xffff94895fe6d460 | file object: 0xffff94895fe6d4e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\StanCore.dll pool: 0xffff94895fe6d5f0 | file object: 0xffff94895fe6d670 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6d780 | file object: 0xffff94895fe6d800 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.CSharp.dll pool: 0xffff94895fe6d910 | file object: 0xffff94895fe6d990 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6daa0 | file object: 0xffff94895fe6db20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Microsoft.VisualStudio.TextMate.Core.dll pool: 0xffff94895fe6dc30 | file object: 0xffff94895fe6dcb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ScopeStudio.VsExtension.EditorMarginExtension.StreamAnalytics.dll pool: 0xffff94895fe6ddc0 | file object: 0xffff94895fe6de40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Project\Microsoft.VisualStudio.Project.VisualC.VCProjectEngine.dll pool: 0xffff94895fe6e0e0 | file object: 0xffff94895fe6e160 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.TeamExplorer.Navigation.dll pool: 0xffff94895fe6e270 | file object: 0xffff94895fe6e2f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.VS.dll pool: 0xffff94895fe6e400 | file object: 0xffff94895fe6e480 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.VisualBasic.Workspaces.dll pool: 0xffff94895fe6e590 | file object: 0xffff94895fe6e610 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6e720 | file object: 0xffff94895fe6e7a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.VisualBasic.EditorFeatures.dll pool: 0xffff94895fe6e8b0 | file object: 0xffff94895fe6e930 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6ea40 | file object: 0xffff94895fe6eac0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.DiffBase.Internal.dll pool: 0xffff94895fe6ebd0 | file object: 0xffff94895fe6ec50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\Microsoft.VisualStudio.DesignTools.XamlIntelliCode.dll pool: 0xffff94895fe6ed60 | file object: 0xffff94895fe6ede0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Cbf18da00#\af12ad0a8d75ef1db6b4f97b9b8c2ea1\Microsoft.CodeAnalysis.ni.dll.aux pool: 0xffff94895fe6f080 | file object: 0xffff94895fe6f100 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6f210 | file object: 0xffff94895fe6f290 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\Microsoft.VisualStudio.Completion.Tests.dll pool: 0xffff94895fe6f3a0 | file object: 0xffff94895fe6f420 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CMake\Microsoft.VisualStudio.CMake.Project.dll pool: 0xffff94895fe6f530 | file object: 0xffff94895fe6f5b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TailoredProjectServices\Microsoft.VisualStudio.TailoredProjectServices.Debugger.dll pool: 0xffff94895fe6f6c0 | file object: 0xffff94895fe6f740 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6f850 | file object: 0xffff94895fe6f8d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.dll pool: 0xffff94895fe6f9e0 | file object: 0xffff94895fe6fa60 | offsetby: 0x80 \$Directory pool: 0xffff94895fe6fb70 | file object: 0xffff94895fe6fbf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\TemplateEngine\Microsoft.VisualStudio.TemplateEngine.Shared.dll pool: 0xffff94895fe6fd00 | file object: 0xffff94895fe6fd80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Language.StandardClassification.dll pool: 0xffff94895fe70020 | file object: 0xffff94895fe700a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Language.Intellisense.dll pool: 0xffff94895fe701b0 | file object: 0xffff94895fe70230 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\FSharp\FSharp.Editor.dll pool: 0xffff94895fe70340 | file object: 0xffff94895fe703c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ReferenceManager\Microsoft.VisualStudio.ReferenceManager.Dialog.dll pool: 0xffff94895fe704d0 | file object: 0xffff94895fe70550 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\Microsoft.Cosmos.ScopeStudio.VsExtension.EditorMarginExtension.Hive.dll pool: 0xffff94895fe70660 | file object: 0xffff94895fe706e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe707f0 | file object: 0xffff94895fe70870 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Microsoft.VisualStudio.TextMate.VSWindows.dll pool: 0xffff94895fe70980 | file object: 0xffff94895fe70a00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\Microsoft.VisualStudio.IntelliCode.dll pool: 0xffff94895fe70b10 | file object: 0xffff94895fe70b90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\WCF Connected Service\Microsoft.VisualStudio.ConnectedServices.Wcf.dll pool: 0xffff94895fe70ca0 | file object: 0xffff94895fe70d20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Instrumentation\Microsoft.DiagnosticsHub.Instrumentation.dll pool: 0xffff94895fe70e30 | file object: 0xffff94895fe70eb0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe71150 | file object: 0xffff94895fe711d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\IntelliCode\IntelliCodeImages.imagemanifest pool: 0xffff94895fe712e0 | file object: 0xffff94895fe71360 | offsetby: 0x80 \$Directory pool: 0xffff94895fe71470 | file object: 0xffff94895fe714f0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Thre3435c1dc#\b149f9ffd2c306451dc4a043ae8f6aa3\System.Threading.Tasks.Dataflow.ni.dll pool: 0xffff94895fe71600 | file object: 0xffff94895fe71680 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.UI.Wpf.dll pool: 0xffff94895fe71790 | file object: 0xffff94895fe71810 | offsetby: 0x80 \$Directory pool: 0xffff94895fe71920 | file object: 0xffff94895fe719a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe71ab0 | file object: 0xffff94895fe71b30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Internal.dll pool: 0xffff94895fe71c40 | file object: 0xffff94895fe71cc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Language\GenerateType\Microsoft.VisualStudio.Language.GenerateType.Implementation.dll pool: 0xffff94895fe71dd0 | file object: 0xffff94895fe71e50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Shell.Connected.dll pool: 0xffff94895fe720f0 | file object: 0xffff94895fe72170 | offsetby: 0x80 \Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll pool: 0xffff94895fe72280 | file object: 0xffff94895fe72300 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll pool: 0xffff94895fe72410 | file object: 0xffff94895fe72490 | offsetby: 0x80 \$Directory pool: 0xffff94895fe725a0 | file object: 0xffff94895fe72620 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Framework.dll pool: 0xffff94895fe72730 | file object: 0xffff94895fe727b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\Pig (HDInsight)\PigProject\PigProject.png pool: 0xffff94895fe728c0 | file object: 0xffff94895fe72940 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.UI.dll pool: 0xffff94895fe72a50 | file object: 0xffff94895fe72ad0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ManagedProjectSystem\ManagedImages.imagemanifest pool: 0xffff94895fe72be0 | file object: 0xffff94895fe72c60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\SharedVS.imagemanifest pool: 0xffff94895fe72d70 | file object: 0xffff94895fe72df0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.Features.dll pool: 0xffff94895fe73090 | file object: 0xffff94895fe73110 | offsetby: 0x80 \$Directory pool: 0xffff94895fe73220 | file object: 0xffff94895fe732a0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Cdce0ec49#\4e43c61a84448e8d67c8e2819603acc0\Microsoft.CodeAnalysis.Features.ni.dll.aux pool: 0xffff94895fe733b0 | file object: 0xffff94895fe73430 | offsetby: 0x80 \$Directory pool: 0xffff94895fe73540 | file object: 0xffff94895fe735c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe736d0 | file object: 0xffff94895fe73750 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe73860 | file object: 0xffff94895fe738e0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V0ca2bbda#\283c8aaf5396174da5aaee13d6600e2a\Microsoft.VisualStudio.Text.UI.ni.dll.aux pool: 0xffff94895fe739f0 | file object: 0xffff94895fe73a70 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Cbf18da00#\fd8243e25572cb1d152f0ac055009300\Microsoft.CodeAnalysis.ni.dll.aux pool: 0xffff94895fe73b80 | file object: 0xffff94895fe73c00 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V1748dfc1#\c02afc8ef84cec7731e32092e7551ba2\Microsoft.VisualStudio.ImageCatalog.ni.dll.aux pool: 0xffff94895fe73d10 | file object: 0xffff94895fe73d90 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll pool: 0xffff94895fe74030 | file object: 0xffff94895fe740b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\ComponentsImages.imagemanifest pool: 0xffff94895fe741c0 | file object: 0xffff94895fe74240 | offsetby: 0x80 \$Directory pool: 0xffff94895fe74350 | file object: 0xffff94895fe743d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe744e0 | file object: 0xffff94895fe74560 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll pool: 0xffff94895fe74670 | file object: 0xffff94895fe746f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.ImageCatalog.dll pool: 0xffff94895fe74800 | file object: 0xffff94895fe74880 | offsetby: 0x80 \$Directory pool: 0xffff94895fe74990 | file object: 0xffff94895fe74a10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\ScaffoldingImages.imagemanifest pool: 0xffff94895fe74b20 | file object: 0xffff94895fe74ba0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll pool: 0xffff94895fe74cb0 | file object: 0xffff94895fe74d30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\ExtensionsMonikers.imagemanifest pool: 0xffff94895fe74e40 | file object: 0xffff94895fe74ec0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vd5001c35#\2abd1618bc05908b9e4fb5f66a507b61\Microsoft.VisualStudio.Text.UI.Wpf.ni.dll.aux pool: 0xffff94895fe75160 | file object: 0xffff94895fe751e0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V333c2ff7#\d26c79bb302080e444ee0fcb8c49970f\Microsoft.VisualStudio.Imaging.ni.dll.aux pool: 0xffff94895fe752f0 | file object: 0xffff94895fe75370 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Shell\Microsoft.VisualStudio.CommonIDE.imagemanifest pool: 0xffff94895fe75480 | file object: 0xffff94895fe75500 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll pool: 0xffff94895fe75610 | file object: 0xffff94895fe75690 | offsetby: 0x80 \$Directory pool: 0xffff94895fe757a0 | file object: 0xffff94895fe75820 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\txxba55a.20s\DevOps.Prod.imagemanifest pool: 0xffff94895fe75930 | file object: 0xffff94895fe759b0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe75ac0 | file object: 0xffff94895fe75b40 | offsetby: 0x80 \$Directory pool: 0xffff94895fe75c50 | file object: 0xffff94895fe75cd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Runtime.CompilerServices.Unsafe.dll pool: 0xffff94895fe75de0 | file object: 0xffff94895fe75e60 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Memory\4a18f3a290fc140c9e98d16d4c2c1064\System.Memory.ni.dll.aux pool: 0xffff94895fe76100 | file object: 0xffff94895fe76180 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe76290 | file object: 0xffff94895fe76310 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.dll pool: 0xffff94895fe76420 | file object: 0xffff94895fe764a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe765b0 | file object: 0xffff94895fe76630 | offsetby: 0x80 \$Directory pool: 0xffff94895fe76740 | file object: 0xffff94895fe767c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\VsDebugPresentationPackage.imagemanifest pool: 0xffff94895fe768d0 | file object: 0xffff94895fe76950 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ADL Tools\2.4.6000.1\ProjectTemplates\U-SQL\DatabaseProject\DatabaseProject.png pool: 0xffff94895fe76a60 | file object: 0xffff94895fe76ae0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CMake\Microsoft.VisualStudio.CMake.Package.imagemanifest pool: 0xffff94895fe76bf0 | file object: 0xffff94895fe76c70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Composition.dll pool: 0xffff94895fe76d80 | file object: 0xffff94895fe76e00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Imaging.dll pool: 0xffff94895fe770a0 | file object: 0xffff94895fe77120 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Shell\Microsoft.VisualStudio.Shell.UI.Internal.StatusBar.imagemanifest pool: 0xffff94895fe77230 | file object: 0xffff94895fe772b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Shell\msenv.imagemanifest pool: 0xffff94895fe773c0 | file object: 0xffff94895fe77440 | offsetby: 0x80 \$Directory pool: 0xffff94895fe77550 | file object: 0xffff94895fe775d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\System.Memory.dll pool: 0xffff94895fe776e0 | file object: 0xffff94895fe77760 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\System.Memory\27afd93ca4b685b56dde7f77f4fcc1c5\System.Memory.ni.dll.aux pool: 0xffff94895fe77870 | file object: 0xffff94895fe778f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\DesktopBridge\WapProjImages.imagemanifest pool: 0xffff94895fe77a00 | file object: 0xffff94895fe77a80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\System.Numerics.Vectors.dll pool: 0xffff94895fe77b90 | file object: 0xffff94895fe77c10 | offsetby: 0x80 \$Directory pool: 0xffff94895fe77d20 | file object: 0xffff94895fe77da0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Shell\LiveShareMonikers.imagemanifest pool: 0xffff94895fe78040 | file object: 0xffff94895fe780c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editors\Microsoft.VisualStudio.Editors.WCF.imagemanifest pool: 0xffff94895fe781d0 | file object: 0xffff94895fe78250 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Shell\Microsoft.VisualStudio.ImageCatalog.imagemanifest pool: 0xffff94895fe78360 | file object: 0xffff94895fe783e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe784f0 | file object: 0xffff94895fe78570 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.dll pool: 0xffff94895fe78680 | file object: 0xffff94895fe78700 | offsetby: 0x80 \$Directory pool: 0xffff94895fe78810 | file object: 0xffff94895fe78890 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Diagnostics.Tools\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Diagnostics.Tools.dll pool: 0xffff94895fe789a0 | file object: 0xffff94895fe78a20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TypeScript\Microsoft.CodeAnalysis.TypeScript.EditorFeatures.dll pool: 0xffff94895fe78b30 | file object: 0xffff94895fe78bb0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe78cc0 | file object: 0xffff94895fe78d40 | offsetby: 0x80 \$Directory pool: 0xffff94895fe78e50 | file object: 0xffff94895fe78ed0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe79170 | file object: 0xffff94895fe791f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe79300 | file object: 0xffff94895fe79380 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Vcb674816#\9de6b6c97cc60dd52b798b6550f39bde\Microsoft.VisualStudio.GraphModel.ni.dll.aux pool: 0xffff94895fe79490 | file object: 0xffff94895fe79510 | offsetby: 0x80 \$Directory pool: 0xffff94895fe79620 | file object: 0xffff94895fe796a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.EditorFeatures.dll pool: 0xffff94895fe797b0 | file object: 0xffff94895fe79830 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.GraphModel.dll pool: 0xffff94895fe79940 | file object: 0xffff94895fe799c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Css.dll pool: 0xffff94895fe79ad0 | file object: 0xffff94895fe79b50 | offsetby: 0x80 \$Directory pool: 0xffff94895fe79c60 | file object: 0xffff94895fe79ce0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe79df0 | file object: 0xffff94895fe79e70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.Impl.dll pool: 0xffff94895fe7a110 | file object: 0xffff94895fe7a190 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7a2a0 | file object: 0xffff94895fe7a320 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Language.dll pool: 0xffff94895fe7a430 | file object: 0xffff94895fe7a4b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Html.dll pool: 0xffff94895fe7a5c0 | file object: 0xffff94895fe7a640 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\LanguageServer\Microsoft.VisualStudio.LanguageServer.Protocol.Extensions.dll pool: 0xffff94895fe7a750 | file object: 0xffff94895fe7a7d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Threading.16.0\Microsoft.VisualStudio.Threading.dll pool: 0xffff94895fe7a8e0 | file object: 0xffff94895fe7a960 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7aa70 | file object: 0xffff94895fe7aaf0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7ac00 | file object: 0xffff94895fe7ac80 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V607a08c7#\db16b2e0825efe447825ca34e24f26cb\Microsoft.VisualStudio.Language.ni.dll.aux pool: 0xffff94895fe7ad90 | file object: 0xffff94895fe7ae10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Language.dll pool: 0xffff94895fe7b0b0 | file object: 0xffff94895fe7b130 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7b240 | file object: 0xffff94895fe7b2c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7b3d0 | file object: 0xffff94895fe7b450 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7b560 | file object: 0xffff94895fe7b5e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7b6f0 | file object: 0xffff94895fe7b770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Html.dll pool: 0xffff94895fe7b880 | file object: 0xffff94895fe7b900 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Css.Editor.dll pool: 0xffff94895fe7ba10 | file object: 0xffff94895fe7ba90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.CodeAnalysis.Razor.Workspaces.dll pool: 0xffff94895fe7bba0 | file object: 0xffff94895fe7bc20 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7bd30 | file object: 0xffff94895fe7bdb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.dll pool: 0xffff94895fe7c050 | file object: 0xffff94895fe7c0d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7c1e0 | file object: 0xffff94895fe7c260 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.C1d3c2215#\4216168ee7bbe7c37f37424dd1ef625f\Microsoft.CodeAnalysis.CSharp.ni.dll.aux pool: 0xffff94895fe7c370 | file object: 0xffff94895fe7c3f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7c500 | file object: 0xffff94895fe7c580 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\KeyVault\Microsoft.VisualStudio.ConnectedServices.Azure.KeyVault.dll pool: 0xffff94895fe7c690 | file object: 0xffff94895fe7c710 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7c820 | file object: 0xffff94895fe7c8a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7c9b0 | file object: 0xffff94895fe7ca30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.HTML.dll pool: 0xffff94895fe7cb40 | file object: 0xffff94895fe7cbc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.dll pool: 0xffff94895fe7ccd0 | file object: 0xffff94895fe7cd50 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net.Http\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.Http.dll pool: 0xffff94895fe7ce60 | file object: 0xffff94895fe7cee0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7d180 | file object: 0xffff94895fe7d200 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.Developer.IdentityService.Client.dll pool: 0xffff94895fe7d310 | file object: 0xffff94895fe7d390 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.dll pool: 0xffff94895fe7d4a0 | file object: 0xffff94895fe7d520 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\Microsoft.VisualStudio.ConnectedServices.dll pool: 0xffff94895fe7d630 | file object: 0xffff94895fe7d6b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe7d7c0 | file object: 0xffff94895fe7d840 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7d950 | file object: 0xffff94895fe7d9d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7dae0 | file object: 0xffff94895fe7db60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Deployment Project\Microsoft.VisualStudio.Azure.Deployment.dll pool: 0xffff94895fe7dc70 | file object: 0xffff94895fe7dcf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\CodeSense\Framework\Microsoft.VisualStudio.CodeSense.Roslyn.dll pool: 0xffff94895fe7de00 | file object: 0xffff94895fe7de80 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7e120 | file object: 0xffff94895fe7e1a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7e2b0 | file object: 0xffff94895fe7e330 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7e440 | file object: 0xffff94895fe7e4c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ManagedProjectSystem\Microsoft.VisualStudio.ProjectSystem.Managed.dll pool: 0xffff94895fe7e5d0 | file object: 0xffff94895fe7e650 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Css.dll pool: 0xffff94895fe7e760 | file object: 0xffff94895fe7e7e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7e8f0 | file object: 0xffff94895fe7e970 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7ea80 | file object: 0xffff94895fe7eb00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.Bcl.AsyncInterfaces.dll pool: 0xffff94895fe7ec10 | file object: 0xffff94895fe7ec90 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\gulp\package.nls.json pool: 0xffff94895fe7eda0 | file object: 0xffff94895fe7ee20 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\php\package.json pool: 0xffff94895fe7f0c0 | file object: 0xffff94895fe7f140 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\07136aa2c502664d4f4ae8e4825d58e7\Microsoft.Build.ni.dll.aux pool: 0xffff94895fe7f250 | file object: 0xffff94895fe7f2d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\handlebars\package.nls.json pool: 0xffff94895fe7f3e0 | file object: 0xffff94895fe7f460 | offsetby: 0x80 \$Directory pool: 0xffff94895fe7f570 | file object: 0xffff94895fe7f5f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Microsoft.WebTools.Shared.CPS.VS.dll pool: 0xffff94895fe7f700 | file object: 0xffff94895fe7f780 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Project\Microsoft.VisualStudio.ProjectSystem.VS.dll pool: 0xffff94895fe7f890 | file object: 0xffff94895fe7f910 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\php-language-features\package.json pool: 0xffff94895fe7fa20 | file object: 0xffff94895fe7faa0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Validation.dll pool: 0xffff94895fe7fbb0 | file object: 0xffff94895fe7fc30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.LanguageServer.Client.dll pool: 0xffff94895fe7fd40 | file object: 0xffff94895fe7fdc0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\handlebars\package.json pool: 0xffff94895fe80060 | file object: 0xffff94895fe800e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe801f0 | file object: 0xffff94895fe80270 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\powershell\package.json pool: 0xffff94895fe80380 | file object: 0xffff94895fe80400 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\pug\package.json pool: 0xffff94895fe80510 | file object: 0xffff94895fe80590 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.VisualC.Utilities.dll pool: 0xffff94895fe806a0 | file object: 0xffff94895fe80720 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Deployment Project\Microsoft.VisualStudio.Azure.ResourceManager.Contracts.1.0.dll pool: 0xffff94895fe80830 | file object: 0xffff94895fe808b0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll pool: 0xffff94895fe809c0 | file object: 0xffff94895fe80a40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.VC.Interfaces.dll pool: 0xffff94895fe80b50 | file object: 0xffff94895fe80bd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.VSIntegration.Contracts.dll pool: 0xffff94895fe80ce0 | file object: 0xffff94895fe80d60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.VC.Interfaces.dll pool: 0xffff94895fe80e70 | file object: 0xffff94895fe80ef0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.CppSvc.Internal.dll pool: 0xffff94895fe81000 | file object: 0xffff94895fe81080 | offsetby: 0x80 \$Directory pool: 0xffff94895fe81190 | file object: 0xffff94895fe81210 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.dll pool: 0xffff94895fe81320 | file object: 0xffff94895fe813a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe814b0 | file object: 0xffff94895fe81530 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.dll pool: 0xffff94895fe81640 | file object: 0xffff94895fe816c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe817d0 | file object: 0xffff94895fe81850 | offsetby: 0x80 \$Directory pool: 0xffff94895fe81960 | file object: 0xffff94895fe819e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.VS.dll pool: 0xffff94895fe81af0 | file object: 0xffff94895fe81b70 | offsetby: 0x80 \$Directory pool: 0xffff94895fe81c80 | file object: 0xffff94895fe81d00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\MSBuild\Current\Bin\Microsoft.Build.Framework.dll pool: 0xffff94895fe81e10 | file object: 0xffff94895fe81e90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Interop.dll pool: 0xffff94895fe82130 | file object: 0xffff94895fe821b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Project\Microsoft.VisualStudio.ProjectSystem.VS.dll pool: 0xffff94895fe822c0 | file object: 0xffff94895fe82340 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ReferenceManager\Microsoft.VisualStudio.ReferenceManager.Contracts.dll pool: 0xffff94895fe82450 | file object: 0xffff94895fe824d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\mhdggq4k.qg3\Microsoft.VisualStudio.Containers.Tools.Shared.dll pool: 0xffff94895fe825e0 | file object: 0xffff94895fe82660 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ProjectServices\Microsoft.VisualStudio.ProjectServices.dll pool: 0xffff94895fe82770 | file object: 0xffff94895fe827f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.CppSvc.Internal.dll pool: 0xffff94895fe82900 | file object: 0xffff94895fe82980 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\razor\package.json pool: 0xffff94895fe82a90 | file object: 0xffff94895fe82b10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.VSIntegration.Contracts.dll pool: 0xffff94895fe82c20 | file object: 0xffff94895fe82ca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.dll pool: 0xffff94895fe82db0 | file object: 0xffff94895fe82e30 | offsetby: 0x80 \$Directory pool: 0xffff94895fe84160 | file object: 0xffff94895fe841e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Client.dll pool: 0xffff94895fe842f0 | file object: 0xffff94895fe84370 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Services.Common.dll pool: 0xffff94895fe84480 | file object: 0xffff94895fe84500 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe84610 | file object: 0xffff94895fe84690 | offsetby: 0x80 \$Directory pool: 0xffff94895fe847a0 | file object: 0xffff94895fe84820 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\main-8c8c2d82aca3a0c5f904db5c1ddaf4c3.code pool: 0xffff94895fe84930 | file object: 0xffff94895fe849b0 | offsetby: 0x80 \REGISTRY\USER\S-1-5-18re\Policies\Microsoft\MUI\SettingsnliveryOptimization\Swarms\dfc31e8 pool: 0xffff94895fe84ac0 | file object: 0xffff94895fe84b40 | offsetby: 0x80 \$Directory pool: 0xffff94895fe84c50 | file object: 0xffff94895fe84cd0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll pool: 0xffff94895fe84de0 | file object: 0xffff94895fe84e60 | offsetby: 0x80 \$Directory pool: 0xffff94895fe85100 | file object: 0xffff94895fe85180 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll pool: 0xffff94895fe85290 | file object: 0xffff94895fe85310 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.dbȔఏᤖजᔃᴆ἟἟἟ pool: 0xffff94895fe85420 | file object: 0xffff94895fe854a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe855b0 | file object: 0xffff94895fe85630 | offsetby: 0x80 \$Directory pool: 0xffff94895fe85740 | file object: 0xffff94895fe857c0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe858d0 | file object: 0xffff94895fe85950 | offsetby: 0x80 \$Directory pool: 0xffff94895fe85a60 | file object: 0xffff94895fe85ae0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db Code\resources\app\exte pool: 0xffff94895fe85bf0 | file object: 0xffff94895fe85c70 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\groovy\package.json pool: 0xffff94895fe85d80 | file object: 0xffff94895fe85e00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Common.dll pool: 0xffff94895fe860a0 | file object: 0xffff94895fe86120 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\node_modules.asar.unpacked\vscode-windows-ca-certs pool: 0xffff94895fe86230 | file object: 0xffff94895fe862b0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll pool: 0xffff94895fe863c0 | file object: 0xffff94895fe86440 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.dll pool: 0xffff94895fe86550 | file object: 0xffff94895fe865d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Controls.dll pool: 0xffff94895fe866e0 | file object: 0xffff94895fe86760 | offsetby: 0x80 ੤꒎쭅뚏耄dtPỿȁԀ ȠỿāԀẝ́Ԁ⓲ȁԀ ȠԁԀ鄑샋狀먔믢꙼ȁ pool: 0xffff94895fe86870 | file object: 0xffff94895fe868f0 | offsetby: 0x80 \Users\User\Desktop\lpus-0.3-alpha\target\release\eprocess_scan.exeleRM.RecoveryServices.xaml pool: 0xffff94895fe86a00 | file object: 0xffff94895fe86a80 | offsetby: 0x80 \$Directory pool: 0xffff94895fe86b90 | file object: 0xffff94895fe86c10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Client.dll pool: 0xffff94895fe86d20 | file object: 0xffff94895fe86da0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll pool: 0xffff94895fe87040 | file object: 0xffff94895fe870c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe871d0 | file object: 0xffff94895fe87250 | offsetby: 0x80 \Device\HarddiskVolume2\Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\exten pool: 0xffff94895fe87360 | file object: 0xffff94895fe873e0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll pool: 0xffff94895fe874f0 | file object: 0xffff94895fe87570 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Diagnostics.HubExtensions.dll pool: 0xffff94895fe87680 | file object: 0xffff94895fe87700 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.dll pool: 0xffff94895fe87810 | file object: 0xffff94895fe87890 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\groovy\package.nls.json pool: 0xffff94895fe879a0 | file object: 0xffff94895fe87a20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.VS.dll pool: 0xffff94895fe87b30 | file object: 0xffff94895fe87bb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe87cc0 | file object: 0xffff94895fe87d40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Architecture Tools\GraphProviderPackage\Microsoft.VisualStudio.Progression.Interfaces.dll pool: 0xffff94895fe87e50 | file object: 0xffff94895fe87ed0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\TestPlatform\Microsoft.VisualStudio.TestPlatform.ObjectModel.dll pool: 0xffff94895fe88170 | file object: 0xffff94895fe881f0 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache pool: 0xffff94895fe88300 | file object: 0xffff94895fe88380 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\grunt\package.nls.json pool: 0xffff94895fe88490 | file object: 0xffff94895fe88510 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe88620 | file object: 0xffff94895fe886a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Diagnostics.Common.dll pool: 0xffff94895fe887b0 | file object: 0xffff94895fe88830 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll pool: 0xffff94895fe88940 | file object: 0xffff94895fe889c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\envdte.dll pool: 0xffff94895fe88ad0 | file object: 0xffff94895fe88b50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.8.0.dll pool: 0xffff94895fe88c60 | file object: 0xffff94895fe88ce0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Debugger.InteropA.dll pool: 0xffff94895fe88df0 | file object: 0xffff94895fe88e70 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe89110 | file object: 0xffff94895fe89190 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.8.0.dll pool: 0xffff94895fe892a0 | file object: 0xffff94895fe89320 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Interop\Microsoft.VisualStudio.Shell.Interop.8.0.dll pool: 0xffff94895fe89430 | file object: 0xffff94895fe894b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe895c0 | file object: 0xffff94895fe89640 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe89750 | file object: 0xffff94895fe897d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\docker\package.json pool: 0xffff94895fe898e0 | file object: 0xffff94895fe89960 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe89a70 | file object: 0xffff94895fe89af0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.MSXML.dll pool: 0xffff94895fe89c00 | file object: 0xffff94895fe89c80 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\grunt\package.json pool: 0xffff94895fe89d90 | file object: 0xffff94895fe89e10 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git\dist\nls.metadata.header.json pool: 0xffff94895fe8a0b0 | file object: 0xffff94895fe8a130 | offsetby: 0x80 \Windows\System32\en-US\shell32.dll.muiကāԀꀂ pool: 0xffff94895fe8a240 | file object: 0xffff94895fe8a2c0 | offsetby: 0x80 \Windows\System32\edputil.dlls\Branding\Baseb pool: 0xffff94895fe8a3d0 | file object: 0xffff94895fe8a450 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\docker\package.nls.json pool: 0xffff94895fe8a560 | file object: 0xffff94895fe8a5e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895fe8a6f0 | file object: 0xffff94895fe8a770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TemplateWizardInterface.dll pool: 0xffff94895fe8a880 | file object: 0xffff94895fe8a900 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Services.Client.Interactive.dll pool: 0xffff94895fe8aa10 | file object: 0xffff94895fe8aa90 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\emmet\package.nls.json pool: 0xffff94895fe8aba0 | file object: 0xffff94895fe8ac20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.Package.Contracts.dll pool: 0xffff94895fe8ad30 | file object: 0xffff94895fe8adb0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\fsharp\package.nls.json pool: 0xffff94895fe8b050 | file object: 0xffff94895fe8b0d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\AzureSDK\3.0.0.0\Microsoft.Rest.ClientRuntime.Azure.dll pool: 0xffff94895fe8b1e0 | file object: 0xffff94895fe8b260 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895fe8b370 | file object: 0xffff94895fe8b3f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.IdentityModel.Clients.ActiveDirectory.dll pool: 0xffff94895fe8b500 | file object: 0xffff94895fe8b580 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895fe8b690 | file object: 0xffff94895fe8b710 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\extension-editing\package.json pool: 0xffff94895fe8b820 | file object: 0xffff94895fe8b8a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.Package.Contracts.dll pool: 0xffff94895fe8b9b0 | file object: 0xffff94895fe8ba30 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\extension-editing\package.nls.json pool: 0xffff94895fe8bb40 | file object: 0xffff94895fe8bbc0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git\package.json pool: 0xffff94895fe8bcd0 | file object: 0xffff94895fe8bd50 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\emmet\package.json pool: 0xffff94895fe8be60 | file object: 0xffff94895fe8bee0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Common.dll pool: 0xffff94895fe8c180 | file object: 0xffff94895fe8c200 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.EditorFeatures.Wpf.dll pool: 0xffff94895fe8c310 | file object: 0xffff94895fe8c390 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\fsharp\package.json pool: 0xffff94895fe8c4a0 | file object: 0xffff94895fe8c520 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git\package.nls.json pool: 0xffff94895fe8c630 | file object: 0xffff94895fe8c6b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895fe8c7c0 | file object: 0xffff94895fe8c840 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.CodingConventions.dll pool: 0xffff94895fe8c950 | file object: 0xffff94895fe8c9d0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git-ui\package.json pool: 0xffff94895fe8cae0 | file object: 0xffff94895fe8cb60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\InteractiveWindow\Microsoft.VisualStudio.InteractiveWindow.dll pool: 0xffff94895fe8cc70 | file object: 0xffff94895fe8ccf0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git-ui\package.nls.json pool: 0xffff94895fe8ce00 | file object: 0xffff94895fe8ce80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.PackageManagement.dll pool: 0xffff94895fe8d120 | file object: 0xffff94895fe8d1a0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\github-authentication\package.json pool: 0xffff94895fe8d2b0 | file object: 0xffff94895fe8d330 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe8d440 | file object: 0xffff94895fe8d4c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Services.Client.Interactive.dll pool: 0xffff94895fe8d5d0 | file object: 0xffff94895fe8d650 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\github-authentication\package.nls.json pool: 0xffff94895fe8d760 | file object: 0xffff94895fe8d7e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.12.0.dll pool: 0xffff94895fe8d8f0 | file object: 0xffff94895fe8d970 | offsetby: 0x80 \Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned3}.2.ver0x0000000000000 pool: 0xffff94895fe8da80 | file object: 0xffff94895fe8db00 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ms-vscode.js-debug-companion\package.json pool: 0xffff94895fe8dc10 | file object: 0xffff94895fe8dc90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.ProjectModel.dll pool: 0xffff94895fe8dda0 | file object: 0xffff94895fe8de20 | offsetby: 0x80 \$Directory pool: 0xffff94895fe8e0c0 | file object: 0xffff94895fe8e140 | offsetby: 0x80 \$Directory pool: 0xffff94895fe8e250 | file object: 0xffff94895fe8e2d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe8e3e0 | file object: 0xffff94895fe8e460 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Services.WebApi.dll pool: 0xffff94895fe8e570 | file object: 0xffff94895fe8e5f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ruby\package.json pool: 0xffff94895fe8e700 | file object: 0xffff94895fe8e780 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\theme-abyss\package.json pool: 0xffff94895fe8e890 | file object: 0xffff94895fe8e910 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\javascript\package.json pool: 0xffff94895fe8ea20 | file object: 0xffff94895fe8eaa0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\javascript\package.nls.json pool: 0xffff94895fe8ebb0 | file object: 0xffff94895fe8ec30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Browser Link\Microsoft.WebTools.BrowserLink.Contracts.dll pool: 0xffff94895fe8ed40 | file object: 0xffff94895fe8edc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895fe8f060 | file object: 0xffff94895fe8f0e0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\git\dist\nls.metadata.json pool: 0xffff94895fe8f1f0 | file object: 0xffff94895fe8f270 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Shared.VS.dll pool: 0xffff94895fe8f380 | file object: 0xffff94895fe8f400 | offsetby: 0x80 \$Directory pool: 0xffff94895fe8f510 | file object: 0xffff94895fe8f590 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\github-authentication\dist\extension.js pool: 0xffff94895fe8f6a0 | file object: 0xffff94895fe8f720 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ms-vscode.references-view\package.json pool: 0xffff94895fe8f830 | file object: 0xffff94895fe8f8b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Protocol.dll pool: 0xffff94895fe8f9c0 | file object: 0xffff94895fe8fa40 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\go\package.json pool: 0xffff94895fe8fb50 | file object: 0xffff94895fe8fbd0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe8fce0 | file object: 0xffff94895fe8fd60 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ms-vscode.node-debug\package.json pool: 0xffff94895fe8fe70 | file object: 0xffff94895fe8fef0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe90000 | file object: 0xffff94895fe90080 | offsetby: 0x80 \$Directory pool: 0xffff94895fe90190 | file object: 0xffff94895fe90210 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Interfaces.dll pool: 0xffff94895fe90320 | file object: 0xffff94895fe903a0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\go\package.nls.json pool: 0xffff94895fe904b0 | file object: 0xffff94895fe90530 | offsetby: 0x80 \$Directory pool: 0xffff94895fe90640 | file object: 0xffff94895fe906c0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\github-authentication\dist\nls.metadata.json pool: 0xffff94895fe907d0 | file object: 0xffff94895fe90850 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\ms-vscode.node-debug2\package.json pool: 0xffff94895fe90960 | file object: 0xffff94895fe909e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe90af0 | file object: 0xffff94895fe90b70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\KeyVault\Microsoft.VisualStudio.Azure.ResourceManagement.dll pool: 0xffff94895fe90c80 | file object: 0xffff94895fe90d00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe90e10 | file object: 0xffff94895fe90e90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\TestPlatform\Microsoft.VisualStudio.TestPlatform.ObjectModel.dll pool: 0xffff94895fe91130 | file object: 0xffff94895fe911b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\jq3442h5.qyy\ProjectTemplates\templateManifest0.noloc.vstman pool: 0xffff94895fe912c0 | file object: 0xffff94895fe91340 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\make\package.nls.json pool: 0xffff94895fe91450 | file object: 0xffff94895fe914d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe915e0 | file object: 0xffff94895fe91660 | offsetby: 0x80 \$Directory pool: 0xffff94895fe91770 | file object: 0xffff94895fe917f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe91900 | file object: 0xffff94895fe91980 | offsetby: 0x80 \Users\User\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db pool: 0xffff94895fe91a90 | file object: 0xffff94895fe91b10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Microsoft.VisualStudio.WindowsAzure.Services.dll pool: 0xffff94895fe91c20 | file object: 0xffff94895fe91ca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.Console.dll pool: 0xffff94895fe91db0 | file object: 0xffff94895fe91e30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.dll pool: 0xffff94895fe920d0 | file object: 0xffff94895fe92150 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.Contracts.dll pool: 0xffff94895fe92260 | file object: 0xffff94895fe922e0 | offsetby: 0x80 \Windows\System32\ieframe.dll pool: 0xffff94895fe923f0 | file object: 0xffff94895fe92470 | offsetby: 0x80 \Windows\System32\en-US\explorerframe.dll.mui pool: 0xffff94895fe92580 | file object: 0xffff94895fe92600 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\shaderlab\package.json pool: 0xffff94895fe92710 | file object: 0xffff94895fe92790 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe928a0 | file object: 0xffff94895fe92920 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\theme-defaults\package.json pool: 0xffff94895fe92a30 | file object: 0xffff94895fe92ab0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe92bc0 | file object: 0xffff94895fe92c40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Browser Link\Microsoft.WebTools.BrowserLink.Contracts.dll pool: 0xffff94895fe92d50 | file object: 0xffff94895fe92dd0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\theme-monokai-dim pool: 0xffff94895fe93070 | file object: 0xffff94895fe930f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.11.0.dll pool: 0xffff94895fe93200 | file object: 0xffff94895fe93280 | offsetby: 0x80 \$Directory pool: 0xffff94895fe93390 | file object: 0xffff94895fe93410 | offsetby: 0x80 \$Directory pool: 0xffff94895fe93520 | file object: 0xffff94895fe935a0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\make\package.json pool: 0xffff94895fe936b0 | file object: 0xffff94895fe93730 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\npm\package.json pool: 0xffff94895fe93840 | file object: 0xffff94895fe938c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe939d0 | file object: 0xffff94895fe93a50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe93b60 | file object: 0xffff94895fe93be0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe93cf0 | file object: 0xffff94895fe93d70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe94010 | file object: 0xffff94895fe94090 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe941a0 | file object: 0xffff94895fe94220 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe94330 | file object: 0xffff94895fe943b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.DesignTools.XamlLanguageServiceBase.dll pool: 0xffff94895fe944c0 | file object: 0xffff94895fe94540 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe94650 | file object: 0xffff94895fe946d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.15.0.dll pool: 0xffff94895fe947e0 | file object: 0xffff94895fe94860 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Microsoft.Publish.Framework.Contracts.dll pool: 0xffff94895fe94970 | file object: 0xffff94895fe949f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe94b00 | file object: 0xffff94895fe94b80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe94c90 | file object: 0xffff94895fe94d10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Publish.dll pool: 0xffff94895fe94e20 | file object: 0xffff94895fe94ea0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Modeling.Sdk.15.0.dll pool: 0xffff94895fe95140 | file object: 0xffff94895fe951c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\Microsoft.VisualStudio.Language.CallHierarchy.dll pool: 0xffff94895fe952d0 | file object: 0xffff94895fe95350 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Contracts.dll pool: 0xffff94895fe95460 | file object: 0xffff94895fe954e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.DesignTools.DesignerContractBase.dll pool: 0xffff94895fe955f0 | file object: 0xffff94895fe95670 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.PublishContract.dll pool: 0xffff94895fe95780 | file object: 0xffff94895fe95800 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.PublishContract.dll pool: 0xffff94895fe95910 | file object: 0xffff94895fe95990 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe95aa0 | file object: 0xffff94895fe95b20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe95c30 | file object: 0xffff94895fe95cb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe95dc0 | file object: 0xffff94895fe95e40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe960e0 | file object: 0xffff94895fe96160 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.CodeStore.Internal.dll pool: 0xffff94895fe96270 | file object: 0xffff94895fe962f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe96400 | file object: 0xffff94895fe96480 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.DesignTools.DesignerContractBase.dll pool: 0xffff94895fe96590 | file object: 0xffff94895fe96610 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Environments\Microsoft.WebTools.Environments.dll pool: 0xffff94895fe96720 | file object: 0xffff94895fe967a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.VS.dll pool: 0xffff94895fe968b0 | file object: 0xffff94895fe96930 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\objective-c\package.json pool: 0xffff94895fe96a40 | file object: 0xffff94895fe96ac0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe96bd0 | file object: 0xffff94895fe96c50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe96d60 | file object: 0xffff94895fe96de0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.LanguageServer.Protocol.dll pool: 0xffff94895fe97080 | file object: 0xffff94895fe97100 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe97210 | file object: 0xffff94895fe97290 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.dll pool: 0xffff94895fe973a0 | file object: 0xffff94895fe97420 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.UniversalApps.Deployment.dll pool: 0xffff94895fe97530 | file object: 0xffff94895fe975b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\UniversalFlavor\Microsoft.VisualStudio.UniversalLibrary.dll pool: 0xffff94895fe976c0 | file object: 0xffff94895fe97740 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LanguageServices.Razor.dll pool: 0xffff94895fe97850 | file object: 0xffff94895fe978d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe979e0 | file object: 0xffff94895fe97a60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NavigateTo\Microsoft.VisualStudio.Language.NavigateTo.Implementation.dll pool: 0xffff94895fe97b70 | file object: 0xffff94895fe97bf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895fe97d00 | file object: 0xffff94895fe97d80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VSDesigner.WCF.dll pool: 0xffff94895fe98020 | file object: 0xffff94895fe980a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.Application.dll pool: 0xffff94895fe981b0 | file object: 0xffff94895fe98230 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ProjectFlavoring.dll pool: 0xffff94895fe98340 | file object: 0xffff94895fe983c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Interop.12.0.dll pool: 0xffff94895fe984d0 | file object: 0xffff94895fe98550 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe98660 | file object: 0xffff94895fe986e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Shell.Interop.12.0.dll pool: 0xffff94895fe987f0 | file object: 0xffff94895fe98870 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe98980 | file object: 0xffff94895fe98a00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.VC.RecommendationProvider.dll pool: 0xffff94895fe98b10 | file object: 0xffff94895fe98b90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe98ca0 | file object: 0xffff94895fe98d20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.RemoteControl.dll pool: 0xffff94895fe98e30 | file object: 0xffff94895fe98eb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.WCFReference.Interop.dll pool: 0xffff94895fe99150 | file object: 0xffff94895fe991d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VSDesigner.WCF.dll pool: 0xffff94895fe992e0 | file object: 0xffff94895fe99360 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.Azure.ActiveDirectory.GraphClient.FirstParty.dll pool: 0xffff94895fe99470 | file object: 0xffff94895fe994f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Debugger.Interop.Internal.dll pool: 0xffff94895fe99600 | file object: 0xffff94895fe99680 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\VSLangProj.dll pool: 0xffff94895fe99790 | file object: 0xffff94895fe99810 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe99920 | file object: 0xffff94895fe999a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Platform.VSEditor.dll pool: 0xffff94895fe99ab0 | file object: 0xffff94895fe99b30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe99c40 | file object: 0xffff94895fe99cc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe99dd0 | file object: 0xffff94895fe99e50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9a0f0 | file object: 0xffff94895fe9a170 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest0.1033.vstman pool: 0xffff94895fe9a280 | file object: 0xffff94895fe9a300 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\EBF\Microsoft.VisualStudio.Workspace.ExternalBuildFramework.TestContracts.dll pool: 0xffff94895fe9a410 | file object: 0xffff94895fe9a490 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.Internal.dll pool: 0xffff94895fe9a5a0 | file object: 0xffff94895fe9a620 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9a730 | file object: 0xffff94895fe9a7b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9a8c0 | file object: 0xffff94895fe9a940 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9aa50 | file object: 0xffff94895fe9aad0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9abe0 | file object: 0xffff94895fe9ac60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9ad70 | file object: 0xffff94895fe9adf0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9b090 | file object: 0xffff94895fe9b110 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe9b220 | file object: 0xffff94895fe9b2a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9b3b0 | file object: 0xffff94895fe9b430 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Core.dll pool: 0xffff94895fe9b540 | file object: 0xffff94895fe9b5c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TestWindow\Microsoft.VisualStudio.TestWindow.Internal.dll pool: 0xffff94895fe9b6d0 | file object: 0xffff94895fe9b750 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kuukjpxv.jrk\ProjectTemplates\templateManifest0.noloc.vstman pool: 0xffff94895fe9b860 | file object: 0xffff94895fe9b8e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9b9f0 | file object: 0xffff94895fe9ba70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9bb80 | file object: 0xffff94895fe9bc00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9bd10 | file object: 0xffff94895fe9bd90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\LiveShare\Microsoft.VisualStudio.LiveShare.Core.dll pool: 0xffff94895fe9c030 | file object: 0xffff94895fe9c0b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9c1c0 | file object: 0xffff94895fe9c240 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9c350 | file object: 0xffff94895fe9c3d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9c4e0 | file object: 0xffff94895fe9c560 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe9c670 | file object: 0xffff94895fe9c6f0 | offsetby: 0x80 \$Directory pool: 0xffff94895fe9c800 | file object: 0xffff94895fe9c880 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9c990 | file object: 0xffff94895fe9ca10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Windows Azure Tools\Resource Manager\Microsoft.VisualStudio.Azure.ResourceManager.Common.dll pool: 0xffff94895fe9cb20 | file object: 0xffff94895fe9cba0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.DataDesign.Interfaces.dll pool: 0xffff94895fe9ccb0 | file object: 0xffff94895fe9cd30 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V0c1ea960#\523deb4c222d8a15fc739fb29d83760f\Microsoft.VisualStudio.Platform.VSEditor.ni.dll.aux pool: 0xffff94895fe9ce40 | file object: 0xffff94895fe9cec0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fe9d160 | file object: 0xffff94895fe9d1e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.ManagedCore.Resources.en-US.Project..vstman pool: 0xffff94895fe9d2f0 | file object: 0xffff94895fe9d370 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.ManagedWeb.Shared.Project..vstman pool: 0xffff94895fe9d480 | file object: 0xffff94895fe9d500 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895fe9d610 | file object: 0xffff94895fe9d690 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.SolutionRestoreManager.dll pool: 0xffff94895fe9d7a0 | file object: 0xffff94895fe9d820 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9d930 | file object: 0xffff94895fe9d9b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Extensions.Shared.dll pool: 0xffff94895fe9dac0 | file object: 0xffff94895fe9db40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9dc50 | file object: 0xffff94895fe9dcd0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9dde0 | file object: 0xffff94895fe9de60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9e100 | file object: 0xffff94895fe9e180 | offsetby: 0x80 \$Directory pool: 0xffff94895fe9e290 | file object: 0xffff94895fe9e310 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V68a56f61#\db66e07b814f5d2beb116bcdb0f97f80\Microsoft.VisualStudio.Text.Internal.ni.dll.aux pool: 0xffff94895fe9e420 | file object: 0xffff94895fe9e4a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895fe9e5b0 | file object: 0xffff94895fe9e630 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.Common.dll pool: 0xffff94895fe9e740 | file object: 0xffff94895fe9e7c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9e8d0 | file object: 0xffff94895fe9e950 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\aepxgmna.u04\Microsoft.VisualStudio.Debugger.DebugAdapterHost.Interfaces.dll pool: 0xffff94895fe9ea60 | file object: 0xffff94895fe9eae0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9ebf0 | file object: 0xffff94895fe9ec70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Editor\Microsoft.VisualStudio.Text.Internal.dll pool: 0xffff94895fe9ed80 | file object: 0xffff94895fe9ee00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\nuyyjiec.xhl\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895fe9f0a0 | file object: 0xffff94895fe9f120 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9f230 | file object: 0xffff94895fe9f2b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Json.Editor.dll pool: 0xffff94895fe9f3c0 | file object: 0xffff94895fe9f440 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Azure.ResourceManager.Tools.Project..vstman pool: 0xffff94895fe9f550 | file object: 0xffff94895fe9f5d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Azure.Waverton.Projects.Project..vstman pool: 0xffff94895fe9f6e0 | file object: 0xffff94895fe9f760 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.DesktopBridge.Tools.Resources.en-US.Project..vstman pool: 0xffff94895fe9f870 | file object: 0xffff94895fe9f8f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Protocol.dll pool: 0xffff94895fe9fa00 | file object: 0xffff94895fe9fa80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fe9fb90 | file object: 0xffff94895fe9fc10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\SourceBasedTestDiscovery\Microsoft.CodeAnalysis.UnitTesting.SourceBasedTestDiscovery.dll pool: 0xffff94895fe9fd20 | file object: 0xffff94895fe9fda0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Extensions.dll pool: 0xffff94895fea0040 | file object: 0xffff94895fea00c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Configuration.dll pool: 0xffff94895fea01d0 | file object: 0xffff94895fea0250 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Configuration.dll pool: 0xffff94895fea0360 | file object: 0xffff94895fea03e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.PackageManagement.VisualStudio.dll pool: 0xffff94895fea04f0 | file object: 0xffff94895fea0570 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Library Manager\Microsoft.Web.LibraryManager.Contracts.dll pool: 0xffff94895fea0680 | file object: 0xffff94895fea0700 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.dll pool: 0xffff94895fea0810 | file object: 0xffff94895fea0890 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.Shared.Resources.en-US.Project..vstman pool: 0xffff94895fea09a0 | file object: 0xffff94895fea0a20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\aepxgmna.u04\Microsoft.VisualStudio.Debugger.DebugAdapterHost.Interfaces.dll pool: 0xffff94895fea0b30 | file object: 0xffff94895fea0bb0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.TestTools.Templates.Managed.Resources.en-US.Project..vstman pool: 0xffff94895fea0cc0 | file object: 0xffff94895fea0d40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea0e50 | file object: 0xffff94895fea0ed0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Extensions.dll pool: 0xffff94895fea1170 | file object: 0xffff94895fea11f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea1300 | file object: 0xffff94895fea1380 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea1490 | file object: 0xffff94895fea1510 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\VSLangProj80.dll pool: 0xffff94895fea1620 | file object: 0xffff94895fea16a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\aepxgmna.u04\Microsoft.VisualStudio.Shared.VSCodeDebugProtocol.dll pool: 0xffff94895fea17b0 | file object: 0xffff94895fea1830 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\VSLangProj2.dll pool: 0xffff94895fea1940 | file object: 0xffff94895fea19c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.Console.dll pool: 0xffff94895fea1ad0 | file object: 0xffff94895fea1b50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea1c60 | file object: 0xffff94895fea1ce0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea1df0 | file object: 0xffff94895fea1e70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea2110 | file object: 0xffff94895fea2190 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Implementation.dll pool: 0xffff94895fea22a0 | file object: 0xffff94895fea2320 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea2430 | file object: 0xffff94895fea24b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea25c0 | file object: 0xffff94895fea2640 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea2750 | file object: 0xffff94895fea27d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.Shared.Project..vstman pool: 0xffff94895fea28e0 | file object: 0xffff94895fea2960 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\Microsoft.VisualStudio.Debugger.UI.Interfaces.dll pool: 0xffff94895fea2a70 | file object: 0xffff94895fea2af0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Search.dll pool: 0xffff94895fea2c00 | file object: 0xffff94895fea2c80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.Wpf.Resources.en-US.Project..vstman pool: 0xffff94895fea2d90 | file object: 0xffff94895fea2e10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Scaffolding\Microsoft.WebTools.Scaffolding.Core.dll pool: 0xffff94895fea30b0 | file object: 0xffff94895fea3130 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.CS.Winforms.en-US.Project..vstman pool: 0xffff94895fea3240 | file object: 0xffff94895fea32c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Utilities.dll pool: 0xffff94895fea33d0 | file object: 0xffff94895fea3450 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll pool: 0xffff94895fea3560 | file object: 0xffff94895fea35e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea36f0 | file object: 0xffff94895fea3770 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.WebTools.DotNet.ProjectTemplates.Project..vstman pool: 0xffff94895fea3880 | file object: 0xffff94895fea3900 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.WebTools.ProjectTemplates.Project..vstman pool: 0xffff94895fea3a10 | file object: 0xffff94895fea3a90 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fea3ba0 | file object: 0xffff94895fea3c20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Nerdbank.Streams.2.x\Nerdbank.Streams.dll pool: 0xffff94895fea3d30 | file object: 0xffff94895fea3db0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Wizards\Microsoft.VC.Wizards.dll pool: 0xffff94895fea4050 | file object: 0xffff94895fea40d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea41e0 | file object: 0xffff94895fea4260 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Platform.SearchProviders.dll pool: 0xffff94895fea4370 | file object: 0xffff94895fea43f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\TaskRunnerExplorer\Microsoft.WebTools.TaskRunnerExplorer.Contracts.dll pool: 0xffff94895fea4500 | file object: 0xffff94895fea4580 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea4690 | file object: 0xffff94895fea4710 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.CMake.Project.Project..vstman pool: 0xffff94895fea4820 | file object: 0xffff94895fea48a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.Ide.ATL.Project..vstman pool: 0xffff94895fea49b0 | file object: 0xffff94895fea4a30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.ProductKeyDialog.dll pool: 0xffff94895fea4b40 | file object: 0xffff94895fea4bc0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\TaskRunnerExplorer\Microsoft.VisualStudio.TaskRunnerExplorer.14.0.dll pool: 0xffff94895fea4cd0 | file object: 0xffff94895fea4d50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.Ide.MDD.Project..vstman pool: 0xffff94895fea4e60 | file object: 0xffff94895fea4ee0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.S5aeb222a#\669c764fff7b343d0a3c4e96a2cc6f40\Microsoft.ServiceHub.Client.ni.dll.aux pool: 0xffff94895fea5180 | file object: 0xffff94895fea5200 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_32\Nerdbank.Streams\b4a91d27662d50e6e3d953b0a1033bde\Nerdbank.Streams.ni.dll.aux pool: 0xffff94895fea5310 | file object: 0xffff94895fea5390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea54a0 | file object: 0xffff94895fea5520 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.Templates.Desktop.Project..vstman pool: 0xffff94895fea5630 | file object: 0xffff94895fea56b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensionsExplorer.dll pool: 0xffff94895fea57c0 | file object: 0xffff94895fea5840 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea5950 | file object: 0xffff94895fea59d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ServiceHubClient\Microsoft.ServiceHub.Client.dll pool: 0xffff94895fea5ae0 | file object: 0xffff94895fea5b60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.Templates.Pro.Project..vstman pool: 0xffff94895fea5c70 | file object: 0xffff94895fea5cf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.VC.Templates.UnitTest.Project..vstman pool: 0xffff94895fea5e00 | file object: 0xffff94895fea5e80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Debugger.Interop.Internal.dll pool: 0xffff94895fea6120 | file object: 0xffff94895fea61a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensionsExplorer.UI.dll pool: 0xffff94895fea62b0 | file object: 0xffff94895fea6330 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.WebTools.Azure.Templates.Project..vstman pool: 0xffff94895fea6440 | file object: 0xffff94895fea64c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea65d0 | file object: 0xffff94895fea6650 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Publish\Environments\Microsoft.WebTools.Environments.VS.dll pool: 0xffff94895fea6760 | file object: 0xffff94895fea67e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.CoreServices.dll pool: 0xffff94895fea68f0 | file object: 0xffff94895fea6970 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.Controls.dll pool: 0xffff94895fea6a80 | file object: 0xffff94895fea6b00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Wizards\Microsoft.VC.Wizards.dll pool: 0xffff94895fea6c10 | file object: 0xffff94895fea6c90 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\StreamJsonRpc.1.x\StreamJsonRpc.dll pool: 0xffff94895fea6da0 | file object: 0xffff94895fea6e20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea70c0 | file object: 0xffff94895fea7140 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Search.dll pool: 0xffff94895fea7250 | file object: 0xffff94895fea72d0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.InteropServices.RuntimeInformation\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.InteropServices.RuntimeInformation.dll pool: 0xffff94895fea73e0 | file object: 0xffff94895fea7460 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\Microsoft.VisualStudio.Workspace.Implementation.dll pool: 0xffff94895fea7570 | file object: 0xffff94895fea75f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Telemetry.dll pool: 0xffff94895fea7700 | file object: 0xffff94895fea7780 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea7890 | file object: 0xffff94895fea7910 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.DiffBase.Contracts.dll pool: 0xffff94895fea7a20 | file object: 0xffff94895fea7aa0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea7bb0 | file object: 0xffff94895fea7c30 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\LanguageServer\Microsoft.VisualStudio.LanguageServer.Client.Implementation.dll pool: 0xffff94895fea7d40 | file object: 0xffff94895fea7dc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea8060 | file object: 0xffff94895fea80e0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea81f0 | file object: 0xffff94895fea8270 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea8380 | file object: 0xffff94895fea8400 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea8510 | file object: 0xffff94895fea8590 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea86a0 | file object: 0xffff94895fea8720 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\SolutionTemplates\blank.vsdir pool: 0xffff94895fea8830 | file object: 0xffff94895fea88b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest1.2052.vstman pool: 0xffff94895fea89c0 | file object: 0xffff94895fea8a40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.CodeReview.dll pool: 0xffff94895fea8b50 | file object: 0xffff94895fea8bd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\Search\Microsoft.VisualStudio.Search.Implementation.dll pool: 0xffff94895fea8ce0 | file object: 0xffff94895fea8d60 | offsetby: 0x80 \Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll pool: 0xffff94895fea8e70 | file object: 0xffff94895fea8ef0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\ConnectedServices\Storage\Microsoft.VisualStudio.ConnectedServices.Azure.Storage.dll pool: 0xffff94895fea9000 | file object: 0xffff94895fea9080 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Commenting.Contracts.dll pool: 0xffff94895fea9190 | file object: 0xffff94895fea9210 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea9320 | file object: 0xffff94895fea93a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.Contracts.dll pool: 0xffff94895fea94b0 | file object: 0xffff94895fea9530 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\TaskRunnerExplorer\Microsoft.WebTools.TaskRunnerExplorer.Contracts.dll pool: 0xffff94895fea9640 | file object: 0xffff94895fea96c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\SQLDB\ProjectTemplates\SSDT\SSDT.vsdir pool: 0xffff94895fea97d0 | file object: 0xffff94895fea9850 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fea9960 | file object: 0xffff94895fea99e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Contracts.dll pool: 0xffff94895fea9af0 | file object: 0xffff94895fea9b70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest10.1029.vstman pool: 0xffff94895fea9c80 | file object: 0xffff94895fea9d00 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\AzureSDK\2.0.0.0\Microsoft.Rest.ClientRuntime.dll pool: 0xffff94895fea9e10 | file object: 0xffff94895fea9e90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaa130 | file object: 0xffff94895feaa1b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaa2c0 | file object: 0xffff94895feaa340 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaa450 | file object: 0xffff94895feaa4d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest12.1045.vstman pool: 0xffff94895feaa5e0 | file object: 0xffff94895feaa660 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaa770 | file object: 0xffff94895feaa7f0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Shared.dll pool: 0xffff94895feaa900 | file object: 0xffff94895feaa980 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.Implementation.dll pool: 0xffff94895feaaa90 | file object: 0xffff94895feaab10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaac20 | file object: 0xffff94895feaaca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest13.1055.vstman pool: 0xffff94895feaadb0 | file object: 0xffff94895feaae30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feab0d0 | file object: 0xffff94895feab150 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest2.1028.vstman pool: 0xffff94895feab260 | file object: 0xffff94895feab2e0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll pool: 0xffff94895feab3f0 | file object: 0xffff94895feab470 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest3.1031.vstman pool: 0xffff94895feab580 | file object: 0xffff94895feab600 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Package.LanguageService.15.0.dll pool: 0xffff94895feab710 | file object: 0xffff94895feab790 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feab8a0 | file object: 0xffff94895feab920 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaba30 | file object: 0xffff94895feabab0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feabbc0 | file object: 0xffff94895feabc40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.TeamFoundation.Git.Contracts.dll pool: 0xffff94895feabd50 | file object: 0xffff94895feabdd0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feac070 | file object: 0xffff94895feac0f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feac200 | file object: 0xffff94895feac280 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feac390 | file object: 0xffff94895feac410 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest4.3082.vstman pool: 0xffff94895feac520 | file object: 0xffff94895feac5a0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feac6b0 | file object: 0xffff94895feac730 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feac840 | file object: 0xffff94895feac8c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.VisualStudio.dll pool: 0xffff94895feac9d0 | file object: 0xffff94895feaca50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feacb60 | file object: 0xffff94895feacbe0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest8.1042.vstman pool: 0xffff94895feaccf0 | file object: 0xffff94895feacd70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fead010 | file object: 0xffff94895fead090 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fead1a0 | file object: 0xffff94895fead220 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\1ta1utvq.5rj\Microsoft.Templates.Core.dll pool: 0xffff94895fead330 | file object: 0xffff94895fead3b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest9.1049.vstman pool: 0xffff94895fead4c0 | file object: 0xffff94895fead540 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fead650 | file object: 0xffff94895fead6d0 | offsetby: 0x80 \Windows\System32\adsldpc.dll pool: 0xffff94895fead7e0 | file object: 0xffff94895fead860 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895fead970 | file object: 0xffff94895fead9f0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\7f900344403fdc1a677cb6b77504f8cf\CustomMarshalers.ni.dll.aux pool: 0xffff94895feadb00 | file object: 0xffff94895feadb80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feadc90 | file object: 0xffff94895feadd10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feade20 | file object: 0xffff94895feadea0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Dired13b18a9#\eeed02aba684e7c50c927553cb11c31e\System.DirectoryServices.ni.dll pool: 0xffff94895feae140 | file object: 0xffff94895feae1c0 | offsetby: 0x80 \Windows\System32\activeds.tlb pool: 0xffff94895feae2d0 | file object: 0xffff94895feae350 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feae460 | file object: 0xffff94895feae4e0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\7f900344403fdc1a677cb6b77504f8cf\CustomMarshalers.ni.dll pool: 0xffff94895feae5f0 | file object: 0xffff94895feae670 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\1ta1utvq.5rj\Microsoft.Templates.Extensions.2019.dll pool: 0xffff94895feae780 | file object: 0xffff94895feae800 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feae910 | file object: 0xffff94895feae990 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaeaa0 | file object: 0xffff94895feaeb20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaec30 | file object: 0xffff94895feaecb0 | offsetby: 0x80 \Windows\System32\activeds.dll pool: 0xffff94895feaedc0 | file object: 0xffff94895feaee40 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll pool: 0xffff94895feaf0e0 | file object: 0xffff94895feaf160 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feaf270 | file object: 0xffff94895feaf2f0 | offsetby: 0x80 \Windows\assembly\NativeImages_v4.0.30319_64\System.Dired13b18a9#\eeed02aba684e7c50c927553cb11c31e\System.DirectoryServices.ni.dll.aux pool: 0xffff94895feaf400 | file object: 0xffff94895feaf480 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest5.1036.vstman pool: 0xffff94895feaf590 | file object: 0xffff94895feaf610 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feaf720 | file object: 0xffff94895feaf7a0 | offsetby: 0x80 \Windows\System32\adsnt.dll pool: 0xffff94895feaf8b0 | file object: 0xffff94895feaf930 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest7.1041.vstman pool: 0xffff94895feafa40 | file object: 0xffff94895feafac0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feafbd0 | file object: 0xffff94895feafc50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\ProjectTemplates\templateManifest6.1040.vstman pool: 0xffff94895feafd60 | file object: 0xffff94895feafde0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb0080 | file object: 0xffff94895feb0100 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Azure\Microsoft.WebTools.Azure.Client.dll pool: 0xffff94895feb0210 | file object: 0xffff94895feb0290 | offsetby: 0x80 \$Directory pool: 0xffff94895feb03a0 | file object: 0xffff94895feb0420 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb0530 | file object: 0xffff94895feb05b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\Debugger\Microsoft.VisualStudio.Debugger.UI.Interfaces.dll pool: 0xffff94895feb06c0 | file object: 0xffff94895feb0740 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.WebClient.Diagnostics.Services.dll pool: 0xffff94895feb0850 | file object: 0xffff94895feb08d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb09e0 | file object: 0xffff94895feb0a60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.12.0.dll pool: 0xffff94895feb0b70 | file object: 0xffff94895feb0bf0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll pool: 0xffff94895feb0d00 | file object: 0xffff94895feb0d80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1020 | file object: 0xffff94895feb10a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb11b0 | file object: 0xffff94895feb1230 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1340 | file object: 0xffff94895feb13c0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll pool: 0xffff94895feb14d0 | file object: 0xffff94895feb1550 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1660 | file object: 0xffff94895feb16e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\TemplateEngine\Microsoft.VisualStudio.TemplateEngine.Shared.dll pool: 0xffff94895feb17f0 | file object: 0xffff94895feb1870 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1980 | file object: 0xffff94895feb1a00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1b10 | file object: 0xffff94895feb1b90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1ca0 | file object: 0xffff94895feb1d20 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb1e30 | file object: 0xffff94895feb1eb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb2150 | file object: 0xffff94895feb21d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.EditorFeatures.dll pool: 0xffff94895feb22e0 | file object: 0xffff94895feb2360 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\TemplateEngine\Microsoft.VisualStudio.TemplateEngine.VS.dll pool: 0xffff94895feb2470 | file object: 0xffff94895feb24f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb2600 | file object: 0xffff94895feb2680 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Debugger.InteropA.dll pool: 0xffff94895feb2790 | file object: 0xffff94895feb2810 | offsetby: 0x80 \$Directory pool: 0xffff94895feb2920 | file object: 0xffff94895feb29a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb2ab0 | file object: 0xffff94895feb2b30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb2c40 | file object: 0xffff94895feb2cc0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll pool: 0xffff94895feb2dd0 | file object: 0xffff94895feb2e50 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb30f0 | file object: 0xffff94895feb3170 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb3280 | file object: 0xffff94895feb3300 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb3410 | file object: 0xffff94895feb3490 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb35a0 | file object: 0xffff94895feb3620 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.ApplicationInsights.Interfaces.dll pool: 0xffff94895feb3730 | file object: 0xffff94895feb37b0 | offsetby: 0x80 \$Directory pool: 0xffff94895feb38c0 | file object: 0xffff94895feb3940 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb3a50 | file object: 0xffff94895feb3ad0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb3be0 | file object: 0xffff94895feb3c60 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb3d70 | file object: 0xffff94895feb3df0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb4090 | file object: 0xffff94895feb4110 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.Compose.dll pool: 0xffff94895feb4220 | file object: 0xffff94895feb42a0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb43b0 | file object: 0xffff94895feb4430 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb4540 | file object: 0xffff94895feb45c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\NuGet.PackageManagement.UI.dll pool: 0xffff94895feb46d0 | file object: 0xffff94895feb4750 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feb4860 | file object: 0xffff94895feb48e0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.ContextManagement.Public.dll pool: 0xffff94895feb49f0 | file object: 0xffff94895feb4a70 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb4b80 | file object: 0xffff94895feb4c00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb4d10 | file object: 0xffff94895feb4d90 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5030 | file object: 0xffff94895feb50b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb51c0 | file object: 0xffff94895feb5240 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.HTML.dll pool: 0xffff94895feb5350 | file object: 0xffff94895feb53d0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\mhdggq4k.qg3\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895feb54e0 | file object: 0xffff94895feb5560 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\mhdggq4k.qg3\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895feb5670 | file object: 0xffff94895feb56f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5800 | file object: 0xffff94895feb5880 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5990 | file object: 0xffff94895feb5a10 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5b20 | file object: 0xffff94895feb5ba0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5cb0 | file object: 0xffff94895feb5d30 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb5e40 | file object: 0xffff94895feb5ec0 | offsetby: 0x80 \Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll pool: 0xffff94895feb6160 | file object: 0xffff94895feb61e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feb62f0 | file object: 0xffff94895feb6370 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb6480 | file object: 0xffff94895feb6500 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\mhdggq4k.qg3\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895feb6610 | file object: 0xffff94895feb6690 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb67a0 | file object: 0xffff94895feb6820 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb6930 | file object: 0xffff94895feb69b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb6ac0 | file object: 0xffff94895feb6b40 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.GraphModel.dll pool: 0xffff94895feb6c50 | file object: 0xffff94895feb6cd0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.CSharp.Features.dll pool: 0xffff94895feb6de0 | file object: 0xffff94895feb6e60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\mhdggq4k.qg3\Microsoft.VisualStudio.Containers.Tools.Common.dll pool: 0xffff94895feb7100 | file object: 0xffff94895feb7180 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb7290 | file object: 0xffff94895feb7310 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb7420 | file object: 0xffff94895feb74a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Microsoft.VisualStudio.Web.Application.dll pool: 0xffff94895feb75b0 | file object: 0xffff94895feb7630 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.Commenting.Presentation.dll pool: 0xffff94895feb7740 | file object: 0xffff94895feb77c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb78d0 | file object: 0xffff94895feb7950 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb7a60 | file object: 0xffff94895feb7ae0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb7bf0 | file object: 0xffff94895feb7c70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.VisualStudio.DiffBase.Contracts.dll pool: 0xffff94895feb7d80 | file object: 0xffff94895feb7e00 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb80a0 | file object: 0xffff94895feb8120 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb8230 | file object: 0xffff94895feb82b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb83c0 | file object: 0xffff94895feb8440 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb8550 | file object: 0xffff94895feb85d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb86e0 | file object: 0xffff94895feb8760 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb8870 | file object: 0xffff94895feb88f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb8a00 | file object: 0xffff94895feb8a80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb8b90 | file object: 0xffff94895feb8c10 | offsetby: 0x80 \$Directory pool: 0xffff94895feb8d20 | file object: 0xffff94895feb8da0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\EventsViewer\Microsoft.DiagnosticsHub.EventsViewerTool.dll pool: 0xffff94895feb9040 | file object: 0xffff94895feb90c0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\envdte80.dll pool: 0xffff94895feb91d0 | file object: 0xffff94895feb9250 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.LanguageServer.Protocol.16.2\Microsoft.VisualStudio.LanguageServer.Protocol.dll pool: 0xffff94895feb9360 | file object: 0xffff94895feb93e0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feb94f0 | file object: 0xffff94895feb9570 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb9680 | file object: 0xffff94895feb9700 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb9810 | file object: 0xffff94895feb9890 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb99a0 | file object: 0xffff94895feb9a20 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feb9b30 | file object: 0xffff94895feb9bb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb9cc0 | file object: 0xffff94895feb9d40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feb9e50 | file object: 0xffff94895feb9ed0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895feba170 | file object: 0xffff94895feba1f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feba300 | file object: 0xffff94895feba380 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feba490 | file object: 0xffff94895feba510 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895feba620 | file object: 0xffff94895feba6a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\CodeSense\Framework\Microsoft.VisualStudio.CodeSense.Common.dll pool: 0xffff94895feba7b0 | file object: 0xffff94895feba830 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.ExternalAccess.Razor.dll pool: 0xffff94895feba940 | file object: 0xffff94895feba9c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febaad0 | file object: 0xffff94895febab50 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\3n5v0kzv.e5c\ProjectTemplates\templateManifest0.noloc.vstman pool: 0xffff94895febac60 | file object: 0xffff94895febace0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febadf0 | file object: 0xffff94895febae70 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\kvmquii2.aaf\Microsoft.VisualStudio.Containers.Tools.Common.Package.dll pool: 0xffff94895febb110 | file object: 0xffff94895febb190 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febb2a0 | file object: 0xffff94895febb320 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LanguageServer.Protocol.dll pool: 0xffff94895febb430 | file object: 0xffff94895febb4b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\OmniSharp.Extensions.LanguageProtocol.dll pool: 0xffff94895febb5c0 | file object: 0xffff94895febb640 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\OmniSharp.Extensions.JsonRpc.dll pool: 0xffff94895febb750 | file object: 0xffff94895febb7d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febb8e0 | file object: 0xffff94895febb960 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febba70 | file object: 0xffff94895febbaf0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\RazorLanguageServices\Microsoft.VisualStudio.LiveShare.Razor.dll pool: 0xffff94895febbc00 | file object: 0xffff94895febbc80 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Publish\Microsoft.VisualStudio.Web.Publish.Contracts.dll pool: 0xffff94895febbd90 | file object: 0xffff94895febbe10 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.TextManager.Interop.10.0.dll pool: 0xffff94895febc0b0 | file object: 0xffff94895febc130 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febc240 | file object: 0xffff94895febc2c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895febc3d0 | file object: 0xffff94895febc450 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febc560 | file object: 0xffff94895febc5e0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\perl\package.json pool: 0xffff94895febc6f0 | file object: 0xffff94895febc770 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febc880 | file object: 0xffff94895febc900 | offsetby: 0x80 \$Directory pool: 0xffff94895febca10 | file object: 0xffff94895febca90 | offsetby: 0x80 \$Directory pool: 0xffff94895febcba0 | file object: 0xffff94895febcc20 | offsetby: 0x80 \$Directory pool: 0xffff94895febcd30 | file object: 0xffff94895febcdb0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febd050 | file object: 0xffff94895febd0d0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febd1e0 | file object: 0xffff94895febd260 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febd370 | file object: 0xffff94895febd3f0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febd500 | file object: 0xffff94895febd580 | offsetby: 0x80 \$Directory pool: 0xffff94895febd690 | file object: 0xffff94895febd710 | offsetby: 0x80 \$Directory pool: 0xffff94895febd820 | file object: 0xffff94895febd8a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.TemplateProviders.Implementation.dll pool: 0xffff94895febd9b0 | file object: 0xffff94895febda30 | offsetby: 0x80 \$Directory pool: 0xffff94895febdb40 | file object: 0xffff94895febdbc0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febdcd0 | file object: 0xffff94895febdd50 | offsetby: 0x80 \$Directory pool: 0xffff94895febde60 | file object: 0xffff94895febdee0 | offsetby: 0x80 \$Directory pool: 0xffff94895febe180 | file object: 0xffff94895febe200 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895febe310 | file object: 0xffff94895febe390 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febe4a0 | file object: 0xffff94895febe520 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febe630 | file object: 0xffff94895febe6b0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febe7c0 | file object: 0xffff94895febe840 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895febe950 | file object: 0xffff94895febe9d0 | offsetby: 0x80 \$Directory pool: 0xffff94895febeae0 | file object: 0xffff94895febeb60 | offsetby: 0x80 \$Directory pool: 0xffff94895febec70 | file object: 0xffff94895febecf0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\extension-900ddfdf6d3b237ee2bed3762f0e96b0.code pool: 0xffff94895febee00 | file object: 0xffff94895febee80 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febf120 | file object: 0xffff94895febf1a0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ProjectSystemQuery\Microsoft.VisualStudio.ProjectSystem.Query.dll pool: 0xffff94895febf2b0 | file object: 0xffff94895febf330 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febf440 | file object: 0xffff94895febf4c0 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febf5d0 | file object: 0xffff94895febf650 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895febf760 | file object: 0xffff94895febf7e0 | offsetby: 0x80 \$Directory pool: 0xffff94895febf8f0 | file object: 0xffff94895febf970 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895febfa80 | file object: 0xffff94895febfb00 | offsetby: 0x80 \$Directory pool: 0xffff94895febfc10 | file object: 0xffff94895febfc90 | offsetby: 0x80 \$Directory pool: 0xffff94895febfda0 | file object: 0xffff94895febfe20 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\e1xcjrpa.qg3\Microsoft.VisualStudio.Docker.LanguageService.dll pool: 0xffff94895fec00c0 | file object: 0xffff94895fec0140 | offsetby: 0x80 \$Directory pool: 0xffff94895fec0250 | file object: 0xffff94895fec02d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec03e0 | file object: 0xffff94895fec0460 | offsetby: 0x80 \$Directory pool: 0xffff94895fec0570 | file object: 0xffff94895fec05f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fec0700 | file object: 0xffff94895fec0780 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.VisualStudio.LanguageServices.LiveShare.dll pool: 0xffff94895fec0890 | file object: 0xffff94895fec0910 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\Microsoft\Web Tools\Languages\Microsoft.WebTools.Languages.Html.LanguageServer.InProc.dll pool: 0xffff94895fec0a20 | file object: 0xffff94895fec0aa0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec0bb0 | file object: 0xffff94895fec0c30 | offsetby: 0x80 \$Directory pool: 0xffff94895fec0d40 | file object: 0xffff94895fec0dc0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1060 | file object: 0xffff94895fec10e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec11f0 | file object: 0xffff94895fec1270 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1380 | file object: 0xffff94895fec1400 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1510 | file object: 0xffff94895fec1590 | offsetby: 0x80 \$Directory pool: 0xffff94895fec16a0 | file object: 0xffff94895fec1720 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1830 | file object: 0xffff94895fec18b0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec19c0 | file object: 0xffff94895fec1a40 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1b50 | file object: 0xffff94895fec1bd0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1ce0 | file object: 0xffff94895fec1d60 | offsetby: 0x80 \$Directory pool: 0xffff94895fec1e70 | file object: 0xffff94895fec1ef0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2000 | file object: 0xffff94895fec2080 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\ManagedLanguages\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.VisualBasic.EditorFeatures.dll pool: 0xffff94895fec2190 | file object: 0xffff94895fec2210 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2320 | file object: 0xffff94895fec23a0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec24b0 | file object: 0xffff94895fec2530 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2640 | file object: 0xffff94895fec26c0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fec27d0 | file object: 0xffff94895fec2850 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2960 | file object: 0xffff94895fec29e0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2af0 | file object: 0xffff94895fec2b70 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2c80 | file object: 0xffff94895fec2d00 | offsetby: 0x80 \$Directory pool: 0xffff94895fec2e10 | file object: 0xffff94895fec2e90 | offsetby: 0x80 \$Directory pool: 0xffff94895fec3130 | file object: 0xffff94895fec31b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\oj55wdle.bv5\ProjectTemplates\templateManifest0.1033.vstman pool: 0xffff94895fec32c0 | file object: 0xffff94895fec3340 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Platform\TreeNavigation\Microsoft.VisualStudio.Shell.TreeNavigation.HierarchyProvider.dll pool: 0xffff94895fec3450 | file object: 0xffff94895fec34d0 | offsetby: 0x80 \$Directory pool: 0xffff94895fec35e0 | file object: 0xffff94895fec3660 | offsetby: 0x80 \$Directory pool: 0xffff94895fec3770 | file object: 0xffff94895fec37f0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895fec3900 | file object: 0xffff94895fec3980 | offsetby: 0x80 \$Directory pool: 0xffff94895fec3a90 | file object: 0xffff94895fec3b10 | offsetby: 0x80 \$Directory pool: 0xffff94895fec3c20 | file object: 0xffff94895fec3ca0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\jeyhqjbx.yg3\ProjectTemplates\templateManifest0.noloc.vstman pool: 0xffff94895fec3db0 | file object: 0xffff94895fec3e30 | offsetby: 0x80 \$Directory pool: 0xffff94895ff02160 | file object: 0xffff94895ff021e0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Product.Community,version=16.6.30128.74\_package.json pool: 0xffff94895ff022f0 | file object: 0xffff94895ff02370 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cmd_ pool: 0xffff94895ff02480 | file object: 0xffff94895ff02500 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.TestTools.Enterprise,version=16.6.30013.169\_package.json pool: 0xffff94895ff02610 | file object: 0xffff94895ff02690 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.TestTools.CodeCoverage,version=16.0.28315.86\_package.json pool: 0xffff94895ff027a0 | file object: 0xffff94895ff02820 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.AppInsights.Tools,version=16.5.29515.121\_package.json pool: 0xffff94895ff02930 | file object: 0xffff94895ff029b0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ff02ac0 | file object: 0xffff94895ff02b40 | offsetby: 0x80 [NOT A VALID _UNICODE_STRING] pool: 0xffff94895ff02c50 | file object: 0xffff94895ff02cd0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\SeverityLevel-0ca557913f5f851f35d5f69ac1c8b890.cod pool: 0xffff94895ff02de0 | file object: 0xffff94895ff02e60 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\ProjectTemplates\Microsoft.VisualStudio.Templates.VB.Shared.Resources.en-US.Project..vstman pool: 0xffff94895ff03100 | file object: 0xffff94895ff03180 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.WebDeploy,version=16.0.28517.75\_package.json pool: 0xffff94895ff03290 | file object: 0xffff94895ff03310 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.ComponentGroup.Azure.Prerequisites,version=16.4.29409.204\_package.json pool: 0xffff94895ff03420 | file object: 0xffff94895ff034a0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions,version=16.6.30013.169\_package.json pool: 0xffff94895ff035b0 | file object: 0xffff94895ff03630 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.TestTools.MSTestV2.Managed,version=16.0.28315.86\_package.json pool: 0xffff94895ff03740 | file object: 0xffff94895ff037c0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\index-6d05e3f5dc09567173959a05670e6a2e.code pool: 0xffff94895ff038d0 | file object: 0xffff94895ff03950 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.Azure.Kubernetes.Tools,version=16.0.28625.61\_package.json pool: 0xffff94895ff03a60 | file object: 0xffff94895ff03ae0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\rust\package.jsonn-1d372262e86d4a24.json6d4a24 pool: 0xffff94895ff03bf0 | file object: 0xffff94895ff03c70 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.ManagedDesktop.Prerequisites,version=16.6.30013.169\_package.json pool: 0xffff94895ff03d80 | file object: 0xffff94895ff03e00 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.Azure.ResourceManager.Tools,version=16.4.29409.204\_package.json pool: 0xffff94895ff040a0 | file object: 0xffff94895ff04120 | offsetby: 0x80 pool: 0xffff94895ff04230 | file object: 0xffff94895ff042b0 | offsetby: 0x80 \Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\Extensions\1ta1utvq.5rj\Microsoft.Templates.UI.dll pool: 0xffff94895ff043c0 | file object: 0xffff94895ff04440 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\node_modules.asar.unpacked\vscode-windows-registry\build\Release\winregistry.node pool: 0xffff94895ff04550 | file object: 0xffff94895ff045d0 | offsetby: 0x80 [NOT READABLE] pool: 0xffff94895ff046e0 | file object: 0xffff94895ff04760 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\jake\package.nls.json_package.json pool: 0xffff94895ff04870 | file object: 0xffff94895ff048f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\objective-c\package.nls.jsonive-c\ pool: 0xffff94895ff04a00 | file object: 0xffff94895ff04a80 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Component.Azure.DataLake.Tools,version=16.6.30013.169\_package.json pool: 0xffff94895ff04b90 | file object: 0xffff94895ff04c10 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\GPUCache\data_3 pool: 0xffff94895ff04d20 | file object: 0xffff94895ff04da0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.TestTools.Core,version=16.6.30013.169\_package.json pool: 0xffff94895ff05040 | file object: 0xffff94895ff050c0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\patch-core-991bc51c9a5503a3545f2167dd373c79.coden pool: 0xffff94895ff051d0 | file object: 0xffff94895ff05250 | offsetby: 0x80 \Users\User\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_cmd_ pool: 0xffff94895ff05360 | file object: 0xffff94895ff053e0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Workload.Azure,version=16.4.29409.204\_package.json pool: 0xffff94895ff054f0 | file object: 0xffff94895ff05570 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.CoreCLR.SDK,version=16.0.28315.86\_package.json pool: 0xffff94895ff05680 | file object: 0xffff94895ff05700 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\GPUCache\index pool: 0xffff94895ff05810 | file object: 0xffff94895ff05890 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\GPUCache\data_0 pool: 0xffff94895ff059a0 | file object: 0xffff94895ff05a20 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.JavaScript.EdgeAdapterHost,version=16.0.28315.86\_package.json pool: 0xffff94895ff05b30 | file object: 0xffff94895ff05bb0 | offsetby: 0x80 \Users\User\AppData\Roaming\Code\GPUCache\data_1 pool: 0xffff94895ff05cc0 | file object: 0xffff94895ff05d40 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.JavaScript.Diagnostics,version=16.0.28517.75\_package.json pool: 0xffff94895ff05e50 | file object: 0xffff94895ff05ed0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.PackageGroup.ConnectedServices,version=16.5.29514.35\_package.json pool: 0xffff94895ff06170 | file object: 0xffff94895ff061f0 | offsetby: 0x80 \Users\User\AppData\Local\Programs\Microsoft VS Code\resources\app\extensions\vscode-account\package.json29813.82\_package.json pool: 0xffff94895ff06300 | file object: 0xffff94895ff06380 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.ComponentGroup.Azure.CloudServices,version=16.4.29409.204\_package.json pool: 0xffff94895ff06490 | file object: 0xffff94895ff06510 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.JavaScript.TypeScript,version=16.5.29721.120\_package.json pool: 0xffff94895ff06620 | file object: 0xffff94895ff066a0 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.Azure.ServiceFabric.Tools,version=16.4.29313.120\_package.json pool: 0xffff94895ff067b0 | file object: 0xffff94895ff06830 | offsetby: 0x80 \ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Component.ManagedDesktop.Core,version=16.4.29318.151\_package.json pool: 0xffff94895ff06940 | file object: 0xffff94895ff069c0 | offsetby: 0x80 ܎İݠ訿舎￿蹠蒞舎￿藰謮舎￿蹰蒞舎￿蘀謮舎￿裡訩舎￿䀀`潝潖游Ṋ殻籯㩀ǖĂ " 0x0