1.2 MiB
1.2 MiB
address,file 0xffff948957c5c890,\$Directory 0xffff948957c5dce0,\Windows\System32\nsisvc.dll 0xffff948957c74380,[NOT READABLE] 0xffff948957c74660,\Windows\System32\drivers\wcifs.sys 0xffff948957c747d0,[NOT A VALID _UNICODE_STRING] 0xffff948957c74940,\Windows\System32\drivers\storqosflt.sys 0xffff948957c74ab0,[NOT READABLE] 0xffff94895a2f80a0,\$Mft::$BITMAP 0xffff94895a2f8210,[NOT READABLE] 0xffff94895a2f84f0,\$LogFile 0xffff94895a2f87d0,\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000004 0xffff94895a2f8c20,\$MftMirr 0xffff94895a2f8d90,\$Secure:$SDS:$DATA 0xffff94895a2f9070,\$Secure:$SII:$INDEX_ALLOCATION 0xffff94895a2f9350,\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys 0xffff94895a2f94c0,[NOT READABLE] 0xffff94895a2f9a80,\$Mft 0xffff94895a2f9ed0,\$BitMap 0xffff94895a7400a0,\$Extend\$RmMetadata\$Repair:$Verify:$DATA 0xffff94895a740210,\$Extend\$UsnJrnl:$J:$DATA 0xffff94895a740380,\$Extend\$RmMetadata\$Repair:$Corrupt:$DATA 0xffff94895a7404f0,\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf 0xffff94895a740660,[NOT A VALID _UNICODE_STRING] 0xffff94895a740940,\Windows\System32\drivers\cdrom.sys 0xffff94895a740ab0,\$Extend\$RmMetadata\$Repair 0xffff94895a740c20,\:$I30:$INDEX_ALLOCATION 0xffff94895a740d90,\$Extend\$Deleted:$I30:$INDEX_ALLOCATION 0xffff94895a741070,[NOT A VALID _UNICODE_STRING] 0xffff94895a7414c0,\$Extend\$RmMetadata\$TxfLog:$I30:$INDEX_ALLOCATION 0xffff94895a7417a0,\$Directory 0xffff94895a741bf0,\$Extend:$I30:$INDEX_ALLOCATION 0xffff94895a741d60,\Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a7e1090,\Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms 0xffff94895a7e1370,\Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM.blf 0xffff94895a7e14e0,\SystemRoot\System32\Config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895a7e1d80,\Windows\System32\config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms 0xffff94895a7e21d0,\$Directory 0xffff94895a7e24b0,[NOT READABLE] 0xffff94895a7e2620,\SystemRoot\System32\Config\TxR\{fd9a35ab-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895a7e4170,\$ConvertToNonresident 0xffff94895a7e45c0,\$ConvertToNonresident 0xffff94895a7e4e60,\Windows\System32\drivers\monitor.sys 0xffff94895a7e5140,[NOT READABLE] 0xffff94895a7f8210,\Windows\System32\drivers\crashdmp.sys 0xffff94895a7f8380,KtmLog 0xffff94895a7f84f0,[NOT READABLE] 0xffff94895a7f8660,\$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION 0xffff94895a7f8ab0,\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000003 0xffff94895a7f8c20,TxfLog 0xffff94895a7f8d90,\$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA 0xffff94895a7f91e0,\Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a7f9350,\:$I30:$INDEX_ALLOCATION 0xffff94895a7f9630,\$Directory 0xffff94895a7f97a0,\$Extend\$RmMetadata\$TxfLog\$Tops 0xffff94895a7f9910,\Device\HarddiskVolume2\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a7f9a80,\$Directory 0xffff94895a7f9bf0,\$Extend\$Reparse:$R:$INDEX_ALLOCATION 0xffff94895a8250a0,\$Directory 0xffff94895a825210,\Windows\System32\ntdll.dll 0xffff94895a8254f0,\Windows\SysWOW64\ntdll.dll 0xffff94895a8257d0,\$Directory 0xffff94895a825ab0,\Windows\System32\drivers\filecrypt.sys 0xffff94895a825c20,\Windows\System32\drivers\storahci.sys 0xffff94895a825d90,\$Directory 0xffff94895a826070,\$Directory 0xffff94895a8264c0,\Windows\System32\vertdll.dll 0xffff94895a826630,\Windows\System32\drivers\Diskdump.sys 0xffff94895a8267a0,\Windows\System32\drivers\en-US\ntfs.sys.mui 0xffff94895a826d60,\Windows\System32\drivers\dumpfve.sys 0xffff94895a826ed0,\ProgramData\Microsoft\MF\Active.GRL 0xffff94895a8c80a0,\Windows\System32\drivers\afunix.sys 0xffff94895a8c8380,\Windows\System32\drivers\afd.sys 0xffff94895a8c8660,\Windows\System32\drivers\vwififlt.sys 0xffff94895a8c87d0,\Windows\System32\drivers\netbt.sys 0xffff94895a8c8ab0,\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys 0xffff94895a8c8c20,[NOT READABLE] 0xffff94895a8c91e0,\Windows\System32\drivers\npfs.sys 0xffff94895a8c94c0,\Windows\System32\drivers\tdi.sys 0xffff94895a8c9910,\Windows\System32\drivers\msfs.sys 0xffff94895a8c9bf0,\Windows\System32\drivers\tdx.sys 0xffff94895a8f20a0,\$Extend\$RmMetadata\$Repair:$Verify:$DATA 0xffff94895a8f2380,\$Secure:$SDS:$DATA 0xffff94895a8f27d0,\$Extend\$Deleted:$I30:$INDEX_ALLOCATION 0xffff94895a8f2ab0,\$Extend\$RmMetadata\$Repair:$Corrupt:$DATA 0xffff94895a8f2c20,\:$I30:$INDEX_ALLOCATION 0xffff94895a8f3070,\$BitMap 0xffff94895a8f31e0,\Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a8f3350,\$Mft::$BITMAP 0xffff94895a8f34c0,\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf 0xffff94895a8f37a0,\$Mft 0xffff94895a8f3910,\$LogFile 0xffff94895a8f3a80,\$Extend\$RmMetadata\$Repair 0xffff94895a8f3d60,\$Secure:$SII:$INDEX_ALLOCATION 0xffff94895a8f3ed0,\$Extend:$I30:$INDEX_ALLOCATION 0xffff94895a9310b0,[NOT READABLE] 0xffff94895a931220,\Windows\System32\drivers\kbdclass.sys 0xffff94895a931500,\Windows\System32\drivers\usbohci.sys 0xffff94895a9317e0,\Windows\System32\drivers\ks.sys 0xffff94895a932360,\Windows\System32\drivers\usbport.sys 0xffff94895a932640,\Windows\System32\drivers\CmBatt.sys 0xffff94895a9327b0,\Windows\System32\drivers\battc.sys 0xffff94895a932920,[NOT READABLE] 0xffff94895a932c00,\Windows\System32\drivers\VBoxWddm.sys 0xffff94895a932ee0,\Windows\System32\drivers\intelppm.sys 0xffff94895a9331c0,\Windows\System32\drivers\E1G6032E.sys 0xffff94895a9334a0,\Windows\System32\drivers\VBoxMouse.sys 0xffff94895a933610,\Windows\System32\drivers\hdaudbus.sys 0xffff94895a933780,\Windows\System32\drivers\portcls.sys 0xffff94895a933a60,\Windows\System32\drivers\mouclass.sys 0xffff94895a933bd0,\Windows\System32\drivers\drmk.sys 0xffff94895a934190,\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys 0xffff94895a934470,\Windows\System32\drivers\rdpbus.sys 0xffff94895a934e80,\Windows\System32\drivers\NdisVirtualBus.sys 0xffff94895a9650a0,[NOT READABLE] 0xffff94895a965210,\Windows\System32\drivers\mssmbios.sys 0xffff94895a9654f0,\Windows\System32\drivers\npsvctrig.sys 0xffff94895a965660,[NOT READABLE] 0xffff94895a965940,\Windows\System32\drivers\nsiproxy.sys 0xffff94895a966070,[NOT READABLE] 0xffff94895a9661e0,\Windows\System32\drivers\dam.sys 0xffff94895a9667a0,\Windows\System32\drivers\gpuenergydrv.sys 0xffff94895a966a80,\$MftMirr 0xffff94895a966ed0,\Windows\System32\drivers\dfsc.sys 0xffff94895a9670a0,\Windows\System32\drivers\pacer.sys 0xffff94895a967380,[NOT READABLE] 0xffff94895a9674f0,[NOT READABLE] 0xffff94895a967660,\$Directory 0xffff94895a967ab0,[NOT READABLE] 0xffff94895a967c20,\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.752.cat 0xffff94895a9681e0,\Windows\System32\drivers\netbios.sys 0xffff94895a968350,\Windows\System32\drivers\VBoxSF.sys 0xffff94895a968630,[NOT READABLE] 0xffff94895a9687a0,[NOT READABLE] 0xffff94895a968910,\Windows\System32\drivers\rdbss.sys 0xffff94895a968a80,\Windows\System32\drivers\csc.sys 0xffff94895a9f3220,\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002 0xffff94895a9f3500,\Windows\apppatch\sysmain.sdb 0xffff94895a9f3670,\$Directory 0xffff94895a9f37e0,\Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a9f3ac0,KtmLog 0xffff94895a9f3c30,\Windows\bootstat.dat 0xffff94895a9f4080,\Windows\System32\drivers\bam.sys 0xffff94895a9f41f0,TxfLog 0xffff94895a9f47b0,\Windows\System32\smss.exe 0xffff94895a9f4920,\Windows\System32\drivers\Vid.sys 0xffff94895a9f4ee0,\Device\HarddiskVolume1\$Extend\$RmMetadata\$TxfLog\$TxfLog 0xffff94895a9f51c0,\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001 0xffff94895a9f5330,\$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION 0xffff94895a9f54a0,\Windows\System32\drivers\ahcache.sys 0xffff94895a9f58f0,[NOT READABLE] 0xffff94895a9f5a60,\$Extend\$RmMetadata\$TxfLog\$Tops 0xffff94895a9f5bd0,\$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA 0xffff94895a9f5d40,\:$I30:$INDEX_ALLOCATION 0xffff94895a9f5eb0,\Windows\System32\drivers\i8042prt.sys 0xffff94895a9f6470,\Windows\System32\drivers\winhvr.sys 0xffff94895a9f68c0,\Windows\System32\drivers\kdnic.sys 0xffff94895a9f6ba0,\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys 0xffff94895a9f6e80,\Windows\System32\drivers\CAD.sys 0xffff94895aa09ec0,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl 0xffff94895aa0a310,\$Secure:$SDH:$INDEX_ALLOCATION 0xffff94895aa0a480,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl 0xffff94895aa0a5f0,\Windows\System32\LogFiles\WMI\LwtNetLog.etl 0xffff94895aa0a760,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderApiLogger.etl 0xffff94895aa0aa40,\Windows\System32\LogFiles\WMI\NtfsLog.etl 0xffff94895aa0abb0,\Windows\System32\LogFiles\WMI\RadioMgr.etl 0xffff94895aa0b5c0,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl 0xffff94895aa0b730,\$Directory 0xffff94895aa0b8a0,[NOT A VALID _UNICODE_STRING] 0xffff94895aa0bcf0,\Windows\System32\LogFiles\WMI\NetCore.etl 0xffff94895aa0c2b0,\$Directory 0xffff94895aa0c420,\$Directory 0xffff94895aa0c700,\Windows\System32\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl 0xffff94895aa0c870,\$Directory 0xffff94895aa0c9e0,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl 0xffff94895aa0cb50,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl 0xffff94895aa0d9b0,\Windows\System32\WDI\LogFiles\WdiContextLog.etl.002 0xffff94895aa0e0e0,\Windows\System32\LogFiles\WMI\Wifi.etl 0xffff94895aa0e980,\$Directory 0xffff94895aa0ec60,\$Directory 0xffff94895aa0edd0,\Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl 0xffff94895aa130d0,\Windows\SysWOW64\profapi.dll 0xffff94895aa13260,\Windows\SysWOW64\ws2_32.dll 0xffff94895aa133f0,[NOT READABLE] 0xffff94895aa13580,\Windows\SysWOW64\cryptsp.dll 0xffff94895aa13710,\Windows\SysWOW64\imagehlp.dll 0xffff94895aa138a0,\Windows\SysWOW64\advapi32.dll 0xffff94895aa13a30,\Windows\SysWOW64\shlwapi.dll 0xffff94895aa13bc0,[NOT READABLE] 0xffff94895aa13d50,[NOT READABLE] 0xffff94895aa13ee0,[NOT READABLE] 0xffff94895aa14200,\Windows\SysWOW64\ucrtbase.dll 0xffff94895aa14390,\Windows\SysWOW64\Wldap32.dll 0xffff94895aa14520,[NOT READABLE] 0xffff94895aa146b0,\Windows\SysWOW64\user32.dll 0xffff94895aa14840,\Windows\SysWOW64\msvcp_win.dll 0xffff94895aa149d0,\Windows\SysWOW64\coml2.dll 0xffff94895aa14b60,\Windows\SysWOW64\win32u.dll 0xffff94895aa14cf0,\Windows\SysWOW64\sspicli.dll 0xffff94895aa14e80,\Windows\SysWOW64\gdi32.dll 0xffff94895aa151a0,[NOT READABLE] 0xffff94895aa15330,[NOT READABLE] 0xffff94895aa154c0,[NOT READABLE] 0xffff94895aa15650,\Windows\System32\autochk.exe 0xffff94895aa157e0,\Windows\SysWOW64\shell32.dll 0xffff94895aa15970,\Windows\SysWOW64\msctf.dll 0xffff94895aa15b00,\Windows\SysWOW64\gdi32full.dll 0xffff94895aa15c90,\Windows\SysWOW64\kernel.appcore.dll 0xffff94895aa15e20,\Windows\SysWOW64\cryptbase.dll 0xffff94895aa16140,\Windows\SysWOW64\KernelBase.dll 0xffff94895aa162d0,[NOT READABLE] 0xffff94895aa16460,\Windows\System32\config\SOFTWARE 0xffff94895aa165f0,[NOT READABLE] 0xffff94895aa16780,\Windows\System32\config\SYSTEM.LOG1 0xffff94895aa16910,\Windows\System32\config\SOFTWARE.LOG1 0xffff94895aa16aa0,\$Directory 0xffff94895aa16c30,\Windows\System32\config\SOFTWARE.LOG2 0xffff94895aa16dc0,\Windows\bootstat.dat 0xffff94895aa1b0d0,[NOT READABLE] 0xffff94895aa1b260,\$Directory 0xffff94895aa1b3f0,\Windows\System32\config\SAM 0xffff94895aa1b580,[NOT READABLE] 0xffff94895aa1b710,\$Directory 0xffff94895aa1b8a0,\Windows\bootstat.dat 0xffff94895aa1ba30,\Windows\System32\config\SAM.LOG1 0xffff94895aa1bbc0,[NOT A VALID _UNICODE_STRING] 0xffff94895aa1bd50,\Boot\BCD 0xffff94895aa1bee0,[NOT A VALID _UNICODE_STRING] 0xffff94895aa1c200,\Windows\System32\config\SECURITY 0xffff94895aa1c390,\Windows\System32\en-US\user32.dll.mui 0xffff94895aa1c520,\swapfile.sys 0xffff94895aa1c6b0,\Windows\System32\config\DEFAULT.LOG2 0xffff94895aa1c840,\Windows\System32\win32kfull.sys 0xffff94895aa1c9d0,\$Directory 0xffff94895aa1cb60,\Windows\System32\config\SECURITY.LOG2 0xffff94895aa1ccf0,\Windows\System32\win32kbase.sys 0xffff94895aa1ce80,\pagefile.sys 0xffff94895aa1d1a0,\Windows\System32\config\DEFAULT.LOG1 0xffff94895aa1d330,\Windows\System32\win32k.sys 0xffff94895aa1d4c0,[NOT READABLE] 0xffff94895aa1d650,\Windows\System32\en-US\win32kbase.sys.mui 0xffff94895aa1d7e0,\$Directory 0xffff94895aa1d970,\Windows\System32\config\SECURITY.LOG1 0xffff94895aa1db00,\Windows\System32\config\SAM.LOG2 0xffff94895aa1dc90,[NOT READABLE] 0xffff94895aa1de20,\Windows\System32\config\DEFAULT 0xffff94895aa1e140,\Boot\BCD.LOG 0xffff94895aa1e2d0,[NOT READABLE] 0xffff94895aa1e460,\Windows\System32\winsrv.dll 0xffff94895aa1e5f0,\Windows\System32\csrsrv.dll 0xffff94895aa1e780,[NOT A VALID _UNICODE_STRING] 0xffff94895aa1e910,\Windows\System32\basesrv.dll 0xffff94895aa1eaa0,\$Directory 0xffff94895aa1ec30,\Windows\System32\csrss.exe 0xffff94895aa1edc0,\Windows\System32 0xffff94895ab76260,[NOT READABLE] 0xffff94895ab763f0,\Windows\System32\wininitext.dll 0xffff94895ab76580,[NOT READABLE] 0xffff94895ab76710,[NOT READABLE] 0xffff94895ab768a0,\Windows\System32\bcastdvruserservice.dll 0xffff94895ab76a30,[NOT READABLE] 0xffff94895ab76bc0,[NOT READABLE] 0xffff94895ab76d50,\Windows\System32\cdd.dll 0xffff94895ab76ee0,[NOT READABLE] 0xffff94895ab77200,\Windows\System32\wininit.exe 0xffff94895ab77390,\Windows\System32 0xffff94895ab77520,[NOT READABLE] 0xffff94895ab776b0,[NOT READABLE] 0xffff94895ab77840,\Windows\System32\slc.dll 0xffff94895ab779d0,\Windows\System32\en-US\csrss.exe.mui 0xffff94895ab77b60,\Windows\System32\umstartup.etl 0xffff94895ab77cf0,\Windows\System32\winlogon.exe 0xffff94895ab77e80,[NOT READABLE] 0xffff94895ab781a0,\Windows\System32 0xffff94895ab78330,\Windows\System32\csrss.exe 0xffff94895ab784c0,\Windows\System32 0xffff94895ab78650,[NOT READABLE] 0xffff94895ab787e0,\Windows\System32\en-US\winsrv.dll.mui 0xffff94895ab78970,\Windows\System32\drivers\dxgmms2.sys 0xffff94895ab78c90,\Windows\System32\winsrvext.dll 0xffff94895ab78e20,\Windows\System32\FNTCACHE.DAT 0xffff94895ab79140,\Windows\System32\sxssrv.dll 0xffff94895ab792d0,\Windows\System32\KBDUS.DLL 0xffff94895ab79460,[NOT READABLE] 0xffff94895ab795f0,[NOT READABLE] 0xffff94895ab79780,\Windows\System32\sspicli.dll 0xffff94895ab79910,\Windows\System32\userenv.dll 0xffff94895ab79aa0,\Windows\System32\en-US\wininit.exe.mui 0xffff94895ab79c30,\Windows\System32\imm32.dll 0xffff94895ab79dc0,\Windows\System32\en-US\winlogon.exe.mui 0xffff94895ac44210,\Windows\System32\drivers\tbs.sys 0xffff94895ac44380,\Windows\System32\drivers\beep.sys 0xffff94895ac44ab0,\Windows\System32\drivers\watchdog.sys 0xffff94895ac44c20,\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys 0xffff94895ac44d90,\$Directory 0xffff94895ac45630,\Windows\System32\drivers\dxgkrnl.sys 0xffff94895ac45a80,\Windows\System32\drivers\null.sys 0xffff94895ac66390,\$Directory 0xffff94895ac66670,\$Directory 0xffff94895ac667e0,\$Directory 0xffff94895ac66ac0,[NOT A VALID _UNICODE_STRING] 0xffff94895ac67080,\$Directory 0xffff94895ac671f0,\$Directory 0xffff94895ac67360,[NOT A VALID _UNICODE_STRING] 0xffff94895ac677b0,[NOT A VALID _UNICODE_STRING] 0xffff94895ac67920,\$Directory 0xffff94895ac67a90,[NOT A VALID _UNICODE_STRING] 0xffff94895ac67c00,[NOT A VALID _UNICODE_STRING] 0xffff94895ac681c0,[NOT A VALID _UNICODE_STRING] 0xffff94895ac684a0,\$Directory 0xffff94895ac68780,\$Directory 0xffff94895ac688f0,[NOT A VALID _UNICODE_STRING] 0xffff94895ac68bd0,\$Directory 0xffff94895ac68d40,\$Directory 0xffff94895ac69300,[NOT READABLE] 0xffff94895ac69470,\Windows\System32\drivers\HdAudio.sys 0xffff94895ac695e0,[NOT READABLE] 0xffff94895ac69750,\Windows\System32\drivers\usbhub.sys 0xffff94895ac698c0,\Windows\System32\drivers\usbd.sys 0xffff94895ac69d10,\Windows\System32\drivers\ksthunk.sys 0xffff94895b0bc0c0,\Windows\System32\oleaut32.dll 0xffff94895b0bc250,\Windows\System32\msvcrt.dll 0xffff94895b0bc3e0,\Windows\System32\combase.dll 0xffff94895b0bc570,\Windows\System32\rpcrt4.dll 0xffff94895b0bc700,\Windows\System32\clbcatq.dll 0xffff94895b0bc890,\Windows\System32\msvcp_win.dll 0xffff94895b0bca20,\Windows\System32\imagehlp.dll 0xffff94895b0bcbb0,\Windows\System32\cfgmgr32.dll 0xffff94895b0bcd40,\Windows\System32\gdi32full.dll 0xffff94895b0bced0,\Windows\System32\ucrtbase.dll 0xffff94895b0bd1f0,\Windows\System32\user32.dll 0xffff94895b0bd380,\Windows\System32\windows.storage.dll 0xffff94895b0bd510,\Windows\System32\ole32.dll 0xffff94895b0bd6a0,\Windows\System32\coml2.dll 0xffff94895b0bd830,\Windows\System32\psapi.dll 0xffff94895b0bd9c0,\Windows\System32\bcryptprimitives.dll 0xffff94895b0bdb50,\Windows\System32\crypt32.dll 0xffff94895b0bdce0,\Windows\System32\comdlg32.dll 0xffff94895b0bde70,\Windows\System32\advapi32.dll 0xffff94895b621d40,[NOT READABLE] 0xffff94895b622830,\Windows 0xffff94895b622e70,\Windows\System32\config\SYSTEM 0xffff94895b62e390,\Windows\System32\drivers\Ndu.sys 0xffff94895b62e500,[NOT READABLE] 0xffff94895b62e7e0,[NOT READABLE] 0xffff94895b62eac0,\Windows\System32\drivers\mouhid.sys 0xffff94895b62ec30,[NOT READABLE] 0xffff94895b62f1f0,[NOT READABLE] 0xffff94895b62f4d0,\Windows\System32\drivers\PEAuth.sys 0xffff94895b62f640,\Windows\System32\drivers\hidclass.sys 0xffff94895b62f920,\Windows\apppatch\drvmain.sdb 0xffff94895b62fc00,[NOT READABLE] 0xffff94895b6301c0,[NOT READABLE] 0xffff94895b6304a0,\Windows\System32\drivers\hidparse.sys 0xffff94895b630a60,\Windows\System32\drivers\mmcss.sys 0xffff94895b630d40,\Windows\System32\drivers\hidusb.sys 0xffff94895ba91090,\Windows\System32\drivers\tcpipreg.sys 0xffff94895ba92620,\Windows\System32\drivers\wd\WdFilter.sys 0xffff94895bca10c0,\Windows\System32\Wldap32.dll 0xffff94895bca1250,\Windows\System32\wow64win.dll 0xffff94895bca13e0,\Windows\System32\config\SYSTEM.LOG2 0xffff94895bca1570,\Windows\System32\sechost.dll 0xffff94895bca1700,\Windows\System32\wow64cpu.dll 0xffff94895bca1890,\Windows\System32\GdiPlus.dll 0xffff94895bca1a20,\Windows\System32\setupapi.dll 0xffff94895bca1bb0,\Windows\System32\nsi.dll 0xffff94895bca1d40,\Windows\System32\shell32.dll 0xffff94895bca1ed0,\Windows\System32\SHCore.dll 0xffff94895bca21f0,\Windows\System32\imm32.dll 0xffff94895bca2380,\Windows\System32\kernel32.dll 0xffff94895bca2510,\Windows\System32\normaliz.dll 0xffff94895bca26a0,\Windows\System32\ws2_32.dll 0xffff94895bca2830,\Windows\System32\wow64.dll 0xffff94895bca29c0,\Windows\System32\shlwapi.dll 0xffff94895bca2b50,\Windows\System32\gdi32.dll 0xffff94895bca2ce0,\Windows\System32\msctf.dll 0xffff94895bca2e70,\Windows\System32\difxapi.dll 0xffff94895bca30c0,\Windows\System32\umpdc.dll 0xffff94895bca3250,\Windows\System32\cryptsp.dll 0xffff94895bca33e0,\Windows\SysWOW64\msvcrt.dll 0xffff94895bca3570,\Windows\System32\msasn1.dll 0xffff94895bca3700,\Windows\System32\bcrypt.dll 0xffff94895bca3890,\Windows\System32\powrprof.dll 0xffff94895bca3a20,\Windows\SysWOW64\msasn1.dll 0xffff94895bca3bb0,\Windows\SysWOW64\sechost.dll 0xffff94895bca3d40,\Windows\SysWOW64\bcrypt.dll 0xffff94895bca3ed0,\Windows\SysWOW64\normaliz.dll 0xffff94895bca41f0,\Windows\System32\KernelBase.dll 0xffff94895bca4380,\Windows\System32\comctl32.dll 0xffff94895bca4510,\Windows\System32\profapi.dll 0xffff94895bca46a0,\Windows\SysWOW64\clbcatq.dll 0xffff94895bca4830,\Windows\System32\kernel.appcore.dll 0xffff94895bca49c0,\Windows\System32\win32u.dll 0xffff94895bca4b50,\Windows\SysWOW64\rpcrt4.dll 0xffff94895bca4ce0,\Windows\SysWOW64\psapi.dll 0xffff94895bca4e70,\Windows\System32\wintrust.dll 0xffff94895bca50c0,\Windows\SysWOW64\SHCore.dll 0xffff94895bca5250,\Windows\SysWOW64\umpdc.dll 0xffff94895bca53e0,\Windows\SysWOW64\comdlg32.dll 0xffff94895bca5570,\Windows\SysWOW64\comctl32.dll 0xffff94895bca5700,\Windows\SysWOW64\ole32.dll 0xffff94895bca5890,\Windows\SysWOW64\crypt32.dll 0xffff94895bca5a20,\Windows\SysWOW64\oleaut32.dll 0xffff94895bca5bb0,\Windows\SysWOW64\kernel32.dll 0xffff94895bca5d40,\Windows\SysWOW64\nsi.dll 0xffff94895bca5ed0,\Windows\SysWOW64\combase.dll 0xffff94895bca61f0,\Windows\SysWOW64\imm32.dll 0xffff94895bca6380,\Windows\SysWOW64\cfgmgr32.dll 0xffff94895bca6510,\Windows\SysWOW64\difxapi.dll 0xffff94895bca66a0,\Windows\SysWOW64\bcryptprimitives.dll 0xffff94895bca6830,\Windows\SysWOW64\setupapi.dll 0xffff94895bca69c0,\Windows\SysWOW64\powrprof.dll 0xffff94895bca6b50,\Windows\SysWOW64\windows.storage.dll 0xffff94895bca6ce0,\Windows\SysWOW64\wintrust.dll 0xffff94895bca6e70,\Windows\SysWOW64\GdiPlus.dll 0xffff94895bde50d0,\Windows\System32\en-US\user32.dll.mui 0xffff94895bde5260,\Windows\Cursors\aero_ns.cur 0xffff94895bde53f0,\Windows\Cursors\aero_busy.ani 0xffff94895bde5580,\Windows\System32\services.exe 0xffff94895bde5710,\Windows\System32\sxs.dll 0xffff94895bde58a0,\Windows\Cursors\aero_ew.cur 0xffff94895bde5a30,[NOT READABLE] 0xffff94895bde5bc0,\Windows\Cursors\aero_pen.cur 0xffff94895bde5d50,\Windows\WinSxS\Manifests\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.752_none_17aba8d26da530da.manifest 0xffff94895bde5ee0,\Windows\Cursors\aero_unavail.cur 0xffff94895bde6200,\Windows\Cursors\aero_link.cur 0xffff94895bde6390,[NOT A VALID _UNICODE_STRING] 0xffff94895bde6520,\Windows\Cursors\aero_nwse.cur 0xffff94895bde66b0,\Windows\Cursors\aero_nesw.cur 0xffff94895bde6840,\Windows\Cursors\aero_up.cur 0xffff94895bde69d0,\Windows\WinSxS\Manifests\amd64_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.18362.752_none_ee5cf8d0cfa9a513.manifest 0xffff94895bde6b60,\$Directory 0xffff94895bde6cf0,\$Directory 0xffff94895bde6e80,\Windows\Cursors\aero_working.ani 0xffff94895bde71a0,\Windows\WinSxS\Manifests\amd64_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.18362.752_none_984c656d415c1334.manifest 0xffff94895bde7330,[NOT READABLE] 0xffff94895bde74c0,\Windows\Cursors\aero_arrow.cur 0xffff94895bde7650,\Windows\Cursors\aero_move.cur 0xffff94895bde77e0,[NOT READABLE] 0xffff94895bde7970,\$Directory 0xffff94895bde7b00,[NOT READABLE] 0xffff94895bde7c90,\Windows\Cursors\aero_helpsel.cur 0xffff94895bde7e20,\Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.18362.752_none_2a285cc246691ef5.manifest 0xffff94895bde8140,\Windows\System32\KBDUS.DLL 0xffff94895bde82d0,\Windows\System32\EventAggregation.dll 0xffff94895bde8460,[NOT READABLE] 0xffff94895bde85f0,\Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.752_en-us_4033a5a7730f50e2.manifest 0xffff94895bde8780,\Windows\System32\lsass.exe 0xffff94895bde8910,\Windows\System32 0xffff94895bde8aa0,\Windows\WinSxS\Manifests\amd64_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.18362.752_none_41c3b6a0a0662d48.manifest 0xffff94895bde8c30,\Windows\System32\devobj.dll 0xffff94895bde8dc0,[NOT READABLE] 0xffff94895ca130e0,\Windows\System32\lsasrv.dll 0xffff94895ca13270,\Windows\System32\KerbClientShared.dll 0xffff94895ca13400,[NOT READABLE] 0xffff94895ca13590,\Windows\System32 0xffff94895ca13720,[NOT READABLE] 0xffff94895ca138b0,\Windows\System32\en-US\bcastdvruserservice.dll.mui 0xffff94895ca13a40,\Windows\System32\ncrypt.dll 0xffff94895ca13bd0,\Windows\System32\netprovfw.dll 0xffff94895ca13d60,\Windows\System32\cryptdll.dll 0xffff94895ca13ef0,\Windows\System32\netlogon.dll 0xffff94895ca14080,\Windows\System32\winsta.dll 0xffff94895ca14210,\Windows\Globalization\Sorting\SortDefault.nls 0xffff94895ca143a0,\Windows\System32\cryptbase.dll 0xffff94895ca14530,\Windows\System32\gmsaclient.dll 0xffff94895ca146c0,\Windows\System32\logoncli.dll 0xffff94895ca14850,\Windows\System32\joinutil.dll 0xffff94895ca149e0,\Windows\System32\mswsock.dll 0xffff94895ca14b70,\Windows\System32\msv1_0.dll 0xffff94895ca14d00,\Windows\System32\dnsapi.dll 0xffff94895ca14e90,\Windows\System32\negoexts.dll 0xffff94895ca151b0,\Windows\System32\samsrv.dll 0xffff94895ca15340,\Windows\System32\wldp.dll 0xffff94895ca154d0,\Windows\System32\kerberos.dll 0xffff94895ca15660,[NOT READABLE] 0xffff94895ca157f0,[NOT READABLE] 0xffff94895ca15980,\Windows\System32\msprivs.dll 0xffff94895ca15b10,\Windows\System32\ntasn1.dll 0xffff94895ca15ca0,\Windows\System32\NtlmShared.dll 0xffff94895ca15e30,[NOT READABLE] 0xffff94895ca16150,\Windows\System32\en-US\lsasrv.dll.mui 0xffff94895ca162e0,[NOT A VALID _UNICODE_STRING] 0xffff94895ca16470,\Windows\System32\dpapi.dll 0xffff94895ca16600,\Windows\System32\schannel.dll 0xffff94895ca16790,[NOT READABLE] 0xffff94895ca16920,[NOT READABLE] 0xffff94895ca16ab0,\Windows\System32\shutdownux.dll 0xffff94895ca16c40,[NOT READABLE] 0xffff94895ca16dd0,\Windows\System32\efslsaext.dll 0xffff94895ca170f0,\Windows\System32\IPHLPAPI.DLL 0xffff94895ca17280,\Windows\System32\sspisrv.dll 0xffff94895ca17410,[NOT READABLE] 0xffff94895ca175a0,\Windows\System32\dpapisrv.dll 0xffff94895ca17730,\Windows\System32\TSpkg.dll 0xffff94895ca178c0,[NOT READABLE] 0xffff94895ca17a50,[NOT A VALID _UNICODE_STRING] 0xffff94895ca17be0,[NOT READABLE] 0xffff94895ca17d70,\Windows\System32\wdigest.dll 0xffff94895ca18090,\Windows\System32\netutils.dll 0xffff94895ca18220,\Windows\System32\rsaenh.dll 0xffff94895ca183b0,\Windows\System32\SshdPinAuthLsa.dll 0xffff94895ca18540,\Windows\System32\credssp.dll 0xffff94895ca186d0,\Windows\System32\Microsoft\Protect\S-1-5-18\User\aa3c15f1-fa3c-45c5-91c0-8a6cee86f69b 0xffff94895ca18860,\$Directory 0xffff94895ca189f0,\$Directory 0xffff94895ca18b80,[NOT A VALID _UNICODE_STRING] 0xffff94895ca18d10,\Windows\System32\MicrosoftAccountCloudAP.dll 0xffff94895ca18ea0,\$Directory 0xffff94895ca191c0,\Windows\System32\pku2u.dll 0xffff94895ca19350,\Windows\System32\cloudAP.dll 0xffff94895ca194e0,[NOT READABLE] 0xffff94895ca19670,[NOT READABLE] 0xffff94895ca19800,\Windows\System32\fontdrvhost.exe 0xffff94895ca19990,\Windows\System32\profext.dll 0xffff94895ca19b20,\Windows\System32\ntmarta.dll 0xffff94895ca19cb0,[NOT A VALID _UNICODE_STRING] 0xffff94895ca19e40,\$Directory 0xffff94895ca1a160,\Windows\System32\scecli.dll 0xffff94895ca1a2f0,\Windows\System32\fwbase.dll 0xffff94895ca1a480,[NOT READABLE] 0xffff94895ca1a610,[NOT READABLE] 0xffff94895ca1a7a0,[NOT READABLE] 0xffff94895ca1a930,\Windows\System32\kdcpw.dll 0xffff94895ca1aac0,[NOT READABLE] 0xffff94895ca1ac50,\Windows\System32\fontdrvhost.exe 0xffff94895ca1ade0,\Windows\System32\FirewallAPI.dll 0xffff94895ca7d0e0,\Windows\System32\authz.dll 0xffff94895ca7d270,[NOT READABLE] 0xffff94895ca7d400,\Windows\Fonts\vgafix.fon 0xffff94895ca7d590,\$Directory 0xffff94895ca7d720,\Windows\System32\svchost.exe 0xffff94895ca7d8b0,\Windows\Fonts\script.fon 0xffff94895ca7da40,\Windows\Fonts\coure.fon 0xffff94895ca7dbd0,\Windows\Fonts\modern.fon 0xffff94895ca7dd60,[NOT READABLE] 0xffff94895ca7def0,\Windows\Fonts\serife.fon 0xffff94895ca7e080,\Windows\Fonts\smalle.fon 0xffff94895ca7e210,\Windows\Fonts\smallf.fon 0xffff94895ca7e3a0,[NOT READABLE] 0xffff94895ca7e530,\Windows\System32\scesrv.dll 0xffff94895ca7e6c0,[NOT READABLE] 0xffff94895ca7e850,\Windows\Fonts\vgasys.fon 0xffff94895ca7e9e0,\Windows\Fonts\courf.fon 0xffff94895ca7eb70,[NOT READABLE] 0xffff94895ca7ed00,\Windows\Fonts\sseriff.fon 0xffff94895ca7ee90,\Windows\System32 0xffff94895ca7f1b0,\Windows\Fonts\vgaoem.fon 0xffff94895ca7f340,[NOT A VALID _UNICODE_STRING] 0xffff94895ca7f4d0,\Windows\System32\WUDFPlatform.dll 0xffff94895ca7f660,\Windows\Fonts\roman.fon 0xffff94895ca7f7f0,\Windows\Fonts\seriff.fon 0xffff94895ca7f980,\Windows\Fonts\sserife.fon 0xffff94895ca7fb10,\Windows\System32 0xffff94895ca7fca0,[NOT READABLE] 0xffff94895ca7fe30,\Windows\System32 0xffff94895ca80150,[NOT READABLE] 0xffff94895ca802e0,\Windows\System32\en-US\services.exe.mui 0xffff94895ca80470,\Windows\System32\umpoext.dll 0xffff94895ca80600,[NOT READABLE] 0xffff94895ca80790,\Windows\System32 0xffff94895ca80920,\Windows\System32\umpnpmgr.dll 0xffff94895ca80ab0,\Windows\Fonts\cga80woa.fon 0xffff94895ca80c40,\Windows\System32\sppc.dll 0xffff94895ca80dd0,\Windows\System32\hid.dll 0xffff94895ca810f0,\Windows\Fonts\cga40woa.fon 0xffff94895ca81280,\Windows\Fonts\marlett.ttf 0xffff94895ca81410,\Windows\Fonts\dosapp.fon 0xffff94895ca815a0,\Windows\System32\dxgi.dll 0xffff94895ca81730,\Windows\System32\mintdh.dll 0xffff94895ca818c0,[NOT READABLE] 0xffff94895ca81a50,[NOT READABLE] 0xffff94895ca81be0,\Windows\System32\SleepStudy\UserNotPresentSession.etl 0xffff94895ca81d70,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ca82090,\Windows\System32\tdh.dll 0xffff94895ca82220,\Windows\Fonts\ega40woa.fon 0xffff94895ca823b0,\Windows\Fonts\micross.ttf 0xffff94895ca82540,[NOT READABLE] 0xffff94895ca826d0,\Windows\System32\svchost.exe 0xffff94895ca82860,\Windows\System32\umpo.dll 0xffff94895ca829f0,[NOT READABLE] 0xffff94895ca82b80,\Windows\System32\DXCore.dll 0xffff94895ca82d10,\Windows\Fonts\ega80woa.fon 0xffff94895ca82ea0,\Windows\System32\gpapi.dll 0xffff94895ca831c0,\Windows\System32\ole32.dll 0xffff94895ca83350,\Windows\System32\umpo-overrides.dll 0xffff94895ca834e0,[NOT READABLE] 0xffff94895ca83670,[NOT READABLE] 0xffff94895ca83800,[NOT READABLE] 0xffff94895ca83990,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 0xffff94895ca83b20,\Windows\System32\rpcss.dll 0xffff94895ca83cb0,\$Directory 0xffff94895ca83e40,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT 0xffff94895ca84160,[NOT READABLE] 0xffff94895ca842f0,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM.blf 0xffff94895ca84480,\$Directory 0xffff94895ca84610,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms 0xffff94895ca847a0,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms 0xffff94895ca84930,[NOT READABLE] 0xffff94895ca84ac0,[NOT READABLE] 0xffff94895ca84c50,\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 0xffff94895ca84de0,[NOT A VALID _UNICODE_STRING] 0xffff94895cabbe40,\$PrepareToShrinkFileSize 0xffff94895cb020e0,[NOT READABLE] 0xffff94895cb02270,[NOT READABLE] 0xffff94895cb02400,[NOT READABLE] 0xffff94895cb02590,[NOT READABLE] 0xffff94895cb02720,[NOT READABLE] 0xffff94895cb028b0,[NOT READABLE] 0xffff94895cb02a40,[NOT READABLE] 0xffff94895cb02bd0,[NOT READABLE] 0xffff94895cb02d60,\Windows\System32 0xffff94895cb02ef0,\Windows\System32\RpcRtRemote.dll 0xffff94895cb03080,[NOT READABLE] 0xffff94895cb03210,[NOT READABLE] 0xffff94895cb033a0,\Windows\System32\svchost.exe 0xffff94895cb03530,\Windows\System32\en-US\mswsock.dll.mui 0xffff94895cb036c0,[NOT READABLE] 0xffff94895cb03850,[NOT READABLE] 0xffff94895cb039e0,[NOT READABLE] 0xffff94895cb03b70,\Windows\System32\en-US\wshqos.dll.mui 0xffff94895cb03d00,[NOT READABLE] 0xffff94895cb03e90,[NOT READABLE] 0xffff94895cb041b0,[NOT READABLE] 0xffff94895cb04340,\$Directory 0xffff94895cb044d0,[NOT READABLE] 0xffff94895cb04660,[NOT READABLE] 0xffff94895cb047f0,[NOT READABLE] 0xffff94895cb04980,\Windows\System32\wshqos.dll 0xffff94895cb04b10,\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895cb04ca0,[NOT READABLE] 0xffff94895cb04e30,\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895cb05150,\Windows\System32\RpcEpMap.dll 0xffff94895cb052e0,\Windows\System32\LogFiles\WMI\Terminal-Services-RCM-20200604-202034.etl 0xffff94895cb05470,\Windows\System32\ResourcePolicyServer.dll 0xffff94895cb05600,[NOT READABLE] 0xffff94895cb05790,[NOT READABLE] 0xffff94895cb05920,\Windows\System32\sysntfy.dll 0xffff94895cb05ab0,[NOT READABLE] 0xffff94895cb05c40,\Windows\System32\embeddedmodesvcapi.dll 0xffff94895cb05dd0,[NOT READABLE] 0xffff94895cb060f0,\Windows\System32\twinapi.appcore.dll 0xffff94895cb06280,[NOT READABLE] 0xffff94895cb06410,\Windows\System32\ResourcePolicyClient.dll 0xffff94895cb065a0,\Windows\System32\PsmServiceExtHost.dll 0xffff94895cb06730,\Windows\System32 0xffff94895cb068c0,\Windows\System32\wer.dll 0xffff94895cb06a50,[NOT READABLE] 0xffff94895cb06be0,\Windows\System32\psmsrv.dll 0xffff94895cb06d70,\Windows\System32\svchost.exe 0xffff94895cb07090,\Windows\System32\audioresourceregistrar.dll 0xffff94895cb07220,[NOT READABLE] 0xffff94895cb073b0,[NOT READABLE] 0xffff94895cb07540,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cb076d0,\Windows\System32\rmclient.dll 0xffff94895cb07860,\Windows\System32\bisrv.dll 0xffff94895cb079f0,[NOT READABLE] 0xffff94895cb07b80,\Windows\System32\xmllite.dll 0xffff94895cb07d10,[NOT READABLE] 0xffff94895cb07ea0,\Windows\System32\dwmapi.dll 0xffff94895cb081c0,\Windows\System32\LogFiles\WMI\Terminal-Services-LSM-20200604-202034.etl 0xffff94895cb08350,\Windows\System32\lsm.dll 0xffff94895cb084e0,[NOT READABLE] 0xffff94895cb08670,\Windows\System32\uxtheme.dll 0xffff94895cb08800,\Windows\System32\UXInit.dll 0xffff94895cb08990,\Windows\Resources\Themes\aero\aero.msstyles 0xffff94895cb08b20,[NOT READABLE] 0xffff94895cb08cb0,\Windows\System32\rpcss.dll 0xffff94895cb08e40,\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_96_01.mss 0xffff94895cb09160,\Windows\System32\Microsoft\Protect\S-1-5-18\84f9f28d-f86f-4dad-bc67-16659402411a 0xffff94895cb092f0,\Windows\System32\dwminit.dll 0xffff94895cb09480,\Windows\System32\SystemEventsBrokerServer.dll 0xffff94895cb09610,\Windows\System32\BrokerLib.dll 0xffff94895cb097a0,\Windows\System32\dwm.exe 0xffff94895cb09930,\Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.752_none_e6c0b5ed1312b70c.manifest 0xffff94895cb09ac0,\Windows\System32\LogonUI.exe 0xffff94895cb09c50,[NOT READABLE] 0xffff94895cb09de0,[NOT READABLE] 0xffff94895cb8f0e0,\Windows\System32 0xffff94895cb8f270,\Windows\System32\dwmcore.dll 0xffff94895cb8f400,\Windows\SysWOW64\TextInputFramework.dll 0xffff94895cb8f590,\Windows\System32\winmm.dll 0xffff94895cb8f720,\Windows\System32\d3d11.dll 0xffff94895cb8f8b0,\Windows\System32\dwmredir.dll 0xffff94895cb8fa40,\Windows\System32\D3DCompiler_47.dll 0xffff94895cb8fbd0,\Windows\System32\dsreg.dll 0xffff94895cb8fd60,\Windows\System32\en-US\dwm.exe.mui 0xffff94895cb8fef0,\Windows\System32\dab.dll 0xffff94895cb90080,\Windows\System32\dwmghost.dll 0xffff94895cb90210,\Windows\System32\LogonController.dll 0xffff94895cb903a0,[NOT READABLE] 0xffff94895cb90530,\Windows\SysWOW64\policymanager.dll 0xffff94895cb906c0,\Windows\System32\msvcp110_win.dll 0xffff94895cb90850,\Windows\System32\samlib.dll 0xffff94895cb909e0,\Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\sqlite3-3f3f539904eeed83d782efa53a8cf6cd.code 0xffff94895cb90b70,\Windows\System32\d2d1.dll 0xffff94895cb90d00,\Windows\System32\dabapi.dll 0xffff94895cb90e90,\Windows\System32\d3d10warp.dll 0xffff94895cb911b0,\Windows\System32\uDWM.dll 0xffff94895cb91340,\Windows\System32\dcomp.dll 0xffff94895cb914d0,[NOT READABLE] 0xffff94895cb91660,\Windows\System32\shacct.dll 0xffff94895cb917f0,\Windows\System32\propsys.dll 0xffff94895cb91980,\Windows\System32\winmmbase.dll 0xffff94895cb91b10,\Windows\System32\CoreMessaging.dll 0xffff94895cb91ca0,\Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.752_en-us_fccbfed23fb8e8f9.manifest 0xffff94895cb91e30,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cb92150,\Windows\System32\apphelp.dll 0xffff94895cb922e0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cb92470,[NOT READABLE] 0xffff94895cb92600,\Windows\System32\svchost.exe 0xffff94895cb92790,\Windows\System32\config\BBI.LOG1 0xffff94895cb92920,[NOT READABLE] 0xffff94895cb92ab0,\Windows\ServiceProfiles\LocalService\NTUSER.DAT 0xffff94895cb92c40,[NOT READABLE] 0xffff94895cb92dd0,\$Directory 0xffff94895cb930f0,\Windows\System32\config\BBI.LOG2 0xffff94895cb93280,\$Directory 0xffff94895cb93410,[NOT READABLE] 0xffff94895cb935a0,\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\CommonExtensions\Microsoft\VisualStudio\Editors\Microsoft.VisualStudio.Editors.dll 0xffff94895cb93730,\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895cb938c0,\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 0xffff94895cb93a50,\$Directory 0xffff94895cb93be0,\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM.blf 0xffff94895cb93d70,\Windows\System32\config\BBI 0xffff94895cb94090,\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 0xffff94895cb94220,\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000001.regtrans-ms 0xffff94895cb943b0,\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TMContainer00000000000000000002.regtrans-ms 0xffff94895cb94540,\$Directory 0xffff94895cb946d0,\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\NTUSER.DAT{fd9a35db-49fe-11e9-aa2c-248a07783950}.TM 0xffff94895cb94860,\Windows\System32\svchost.exe 0xffff94895cb949f0,\Windows\System32\svchost.exe 0xffff94895cb94b80,\$Directory 0xffff94895cb94d10,\Windows\System32 0xffff94895cb94ea0,[NOT READABLE] 0xffff94895cb951c0,[NOT READABLE] 0xffff94895cb95350,\Windows\System32 0xffff94895cb954e0,[NOT READABLE] 0xffff94895cb95670,\Windows\System32\nlaapi.dll 0xffff94895cb95800,\Windows\System32 0xffff94895cb95990,[NOT READABLE] 0xffff94895cb95b20,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cb95cb0,\Windows\System32\svchost.exe 0xffff94895cb95e40,\Windows\System32\termsrv.dll 0xffff94895cb96160,\Windows\System32 0xffff94895cb962f0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cb96480,\Windows\System32\gpsvc.dll 0xffff94895cb96610,\Windows\System32\dsrole.dll 0xffff94895cb967a0,\Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\BE8B021F9E811DFC8C8A28572A17C05A_16D2E4BC920B861ABE54C1687CAA1EC8 0xffff94895cb96930,\Windows\System32\svchost.exe 0xffff94895cb96ac0,\Windows\System32\lmhsvc.dll 0xffff94895cb96c50,[NOT READABLE] 0xffff94895cb96de0,\Windows\System32\nrpsrv.dll 0xffff94895cc3d0e0,[NOT READABLE] 0xffff94895cc3d270,\Windows\System32\mscms.dll 0xffff94895cc3d400,[NOT READABLE] 0xffff94895cc3d590,[NOT READABLE] 0xffff94895cc3d720,\Windows\System32\ninput.dll 0xffff94895cc3d8b0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cc3da40,\Windows\System32\Windows.Gaming.Input.dll 0xffff94895cc3dbd0,[NOT READABLE] 0xffff94895cc3dd60,\Windows\System32\ISM.dll 0xffff94895cc3def0,\Windows\System32\WindowsCodecs.dll 0xffff94895cc3e080,\Windows\System32\OneCoreUAPCommonProxyStub.dll 0xffff94895cc3e210,\Windows\System32 0xffff94895cc3e3a0,\Windows\System32\WinTypes.dll 0xffff94895cc3e530,[NOT READABLE] 0xffff94895cc3e6c0,[NOT A VALID _UNICODE_STRING] 0xffff94895cc3e850,\Windows\System32\CoreUIComponents.dll 0xffff94895cc3e9e0,\Windows\System32\svchost.exe 0xffff94895cc3eb70,[NOT READABLE] 0xffff94895cc3ed00,\Windows\System32\UIAnimation.dll 0xffff94895cc3ee90,[NOT READABLE] 0xffff94895cc3f1b0,\Windows\System32\wtsapi32.dll 0xffff94895cc3f340,\Windows\System32\DispBroker.Desktop.dll 0xffff94895cc3f4d0,\Windows\System32\taskschd.dll 0xffff94895cc3f660,\Windows\System32\coloradapterclient.dll 0xffff94895cc3f7f0,[NOT READABLE] 0xffff94895cc3f980,\Windows\System32\TimeBrokerServer.dll 0xffff94895cc3fb10,\Windows\System32\avrt.dll 0xffff94895cc3fca0,[NOT READABLE] 0xffff94895cc3fe30,[NOT READABLE] 0xffff94895cc40150,[NOT READABLE] 0xffff94895cc402e0,\Windows\Tasks 0xffff94895cc40470,[NOT READABLE] 0xffff94895cc40600,[NOT READABLE] 0xffff94895cc40790,\Windows\System32\taskcomp.dll 0xffff94895cc40920,\Windows\System32\SystemEventsBrokerClient.dll 0xffff94895cc40ab0,[NOT READABLE] 0xffff94895cc40c40,\Windows\System32\lsmproxy.dll 0xffff94895cc40dd0,[NOT READABLE] 0xffff94895cc410f0,[NOT READABLE] 0xffff94895cc41280,[NOT READABLE] 0xffff94895cc41410,\Windows\System32\ubpm.dll 0xffff94895cc415a0,[NOT READABLE] 0xffff94895cc41730,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cc418c0,[NOT READABLE] 0xffff94895cc41a50,\Windows\System32\CSystemEventsBrokerClient.dll 0xffff94895cc41be0,[NOT READABLE] 0xffff94895cc41d70,[NOT READABLE] 0xffff94895cc42090,[NOT READABLE] 0xffff94895cc42220,\Windows\System32 0xffff94895cc423b0,[NOT READABLE] 0xffff94895cc42540,[NOT READABLE] 0xffff94895cc426d0,\Windows\Tasks\SA.DAT 0xffff94895cc42860,\Windows\System32\ncbservice.dll 0xffff94895cc429f0,\Windows\System32\Windows.Devices.Radios.dll 0xffff94895cc42b80,\Windows\System32\schedsvc.dll 0xffff94895cc42d10,\Windows\System32\usermgrcli.dll 0xffff94895cc42ea0,\Windows\System32\wmiclnt.dll 0xffff94895cc431c0,[NOT READABLE] 0xffff94895cc43350,[NOT A VALID _UNICODE_STRING] 0xffff94895cc434e0,[NOT READABLE] 0xffff94895cc43670,\Windows\System32 0xffff94895cc43800,[NOT READABLE] 0xffff94895cc43990,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cc43b20,\Windows\System32\bi.dll 0xffff94895cc43cb0,\Windows\System32\BluetoothApis.dll 0xffff94895cc43e40,[NOT READABLE] 0xffff94895cc44160,[NOT READABLE] 0xffff94895cc442f0,[NOT READABLE] 0xffff94895cc44480,\Windows\System32\svchost.exe 0xffff94895cc44610,\Windows\System32\BthRadioMedia.dll 0xffff94895cc447a0,\Windows\System32\svchost.exe 0xffff94895cc44930,\Windows\System32\svchost.exe 0xffff94895cc44ac0,\Windows\System32\mstask.dll 0xffff94895cc44c50,\Windows\System32\httpprxc.dll 0xffff94895cc44de0,[NOT READABLE] 0xffff94895ccd0c60,\Windows\System32\drivers\rdpdr.sys 0xffff94895ccd10b0,\Windows\System32\drivers\rdpvideominiport.sys 0xffff94895ccd4470,[NOT READABLE] 0xffff94895ccd48c0,\Windows\System32\drivers\tsusbhub.sys 0xffff94895ccd4ba0,[NOT READABLE] 0xffff94895ccd5ce0,\Windows\System32\drivers\winquic.sys 0xffff94895ccd62a0,[NOT READABLE] 0xffff94895ccd6b40,\$PrepareToShrinkFileSize 0xffff94895ccd7100,\Windows\System32\drivers\mrxsmb.sys 0xffff94895ccd7270,\Windows\System32\drivers\mrxsmb20.sys 0xffff94895ccd73e0,[NOT READABLE] 0xffff94895ccd76c0,[NOT READABLE] 0xffff94895ccd7830,\Windows\System32\drivers\bowser.sys 0xffff94895ccd8240,[NOT READABLE] 0xffff94895ccd90a0,\$PrepareToShrinkFileSize 0xffff94895ccdd5a0,\Windows\System32\drivers\luafv.sys 0xffff94895ccdd880,[NOT A VALID _UNICODE_STRING] 0xffff94895ccde9c0,[NOT A VALID _UNICODE_STRING] 0xffff94895ccdeca0,\$Directory 0xffff94895ccdf0f0,\Windows\System32\drivers\cldflt.sys 0xffff94895cd02100,[NOT READABLE] 0xffff94895cd02290,[NOT READABLE] 0xffff94895cd02420,[NOT READABLE] 0xffff94895cd025b0,\Windows\System32\rdpbase.dll 0xffff94895cd02740,[NOT READABLE] 0xffff94895cd028d0,\Windows\System32\umb.dll 0xffff94895cd02a60,\Windows\System32\SEMgrSvc.dll 0xffff94895cd02bf0,[NOT READABLE] 0xffff94895cd02d80,[NOT READABLE] 0xffff94895cd030a0,\Windows\System32\vmbuspipe.dll 0xffff94895cd03230,[NOT READABLE] 0xffff94895cd033c0,\Windows\System32\pdh.dll 0xffff94895cd03550,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd036e0,\Windows\System32\Microsoft\Protect\S-1-5-18\User\2daf8b93-86fe-408b-9ccc-54bf0c3432f7 0xffff94895cd03870,[NOT READABLE] 0xffff94895cd03a00,\Windows\System32\rdpcorets.dll 0xffff94895cd03b90,\Windows\System32\netprofm.dll 0xffff94895cd03d20,\Windows\System32\rfxvmt.dll 0xffff94895cd03eb0,[NOT READABLE] 0xffff94895cd041d0,\Windows\System32\Websocket.dll 0xffff94895cd04360,\Windows\System32\rdpserverbase.dll 0xffff94895cd044f0,\Windows\System32\regapi.dll 0xffff94895cd04680,\Windows\System32\en-US\termsrv.dll.mui 0xffff94895cd04810,\Windows\System32\tlscsp.dll 0xffff94895cd049a0,\Windows\System32 0xffff94895cd04b30,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd04cc0,[NOT READABLE] 0xffff94895cd04e50,[NOT READABLE] 0xffff94895cd05170,\Windows\System32 0xffff94895cd05300,[NOT A VALID _UNICODE_STRING] 0xffff94895cd05490,[NOT READABLE] 0xffff94895cd05620,\Windows\System32\AudioSes.dll 0xffff94895cd057b0,[NOT READABLE] 0xffff94895cd05940,\Windows\System32\PCPKsp.dll 0xffff94895cd05ad0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd05c60,\Windows\System32\profsvcext.dll 0xffff94895cd05df0,\Windows\System32\tbs.dll 0xffff94895cd06110,[NOT READABLE] 0xffff94895cd062a0,[NOT READABLE] 0xffff94895cd06430,\$Directory 0xffff94895cd065c0,\Windows\System32\MMDevAPI.dll 0xffff94895cd06750,\Windows\System32\capauthz.dll 0xffff94895cd068e0,\Windows\System32\wkscli.dll 0xffff94895cd06a70,[NOT READABLE] 0xffff94895cd06c00,\Windows\System32\ScDeviceEnum.dll 0xffff94895cd06d90,\Windows\System32\cryptngc.dll 0xffff94895cd070b0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd07240,[NOT READABLE] 0xffff94895cd073d0,\Windows\System32\profsvc.dll 0xffff94895cd07560,[NOT A VALID _UNICODE_STRING] 0xffff94895cd076f0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd07880,[NOT READABLE] 0xffff94895cd07a10,[NOT A VALID _UNICODE_STRING] 0xffff94895cd07ba0,\$Directory 0xffff94895cd07d30,[NOT READABLE] 0xffff94895cd07ec0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd081e0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd08370,[NOT A VALID _UNICODE_STRING] 0xffff94895cd08500,[NOT READABLE] 0xffff94895cd08690,\Windows\System32\AudioEndpointBuilder.dll 0xffff94895cd08820,\Windows\System32\wlanapi.dll 0xffff94895cd089b0,[NOT READABLE] 0xffff94895cd08cd0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd08e60,\Windows\SystemResources\Windows.UI.Logon\pris\Windows.UI.Logon.en-US.pri 0xffff94895cd09180,\Windows\System32\svchost.exe 0xffff94895cd09310,\Windows\System32 0xffff94895cd094a0,\Windows\System32\actxprxy.dll 0xffff94895cd09630,[NOT READABLE] 0xffff94895cd097c0,[NOT READABLE] 0xffff94895cd09950,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd09ae0,[NOT READABLE] 0xffff94895cd09c70,\Windows\System32\TimeBrokerClient.dll 0xffff94895cd09e00,[NOT READABLE] 0xffff94895cd0a120,\Windows\System32\svchost.exe 0xffff94895cd0a2b0,\Windows\System32 0xffff94895cd0a440,\Windows\System32 0xffff94895cd0a5d0,[NOT READABLE] 0xffff94895cd0a760,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd0a8f0,\Windows\System32\svchost.exe 0xffff94895cd0aa80,[NOT READABLE] 0xffff94895cd0ac10,\Windows\System32\DispBroker.dll 0xffff94895cd0ada0,\Windows\System32\Windows.Graphics.dll 0xffff94895cd0b0c0,\Windows\System32\WPTaskScheduler.dll 0xffff94895cd0b250,\Windows\System32\tzres.dll 0xffff94895cd0b3e0,\Windows\System32\en-US\tzres.dll.mui 0xffff94895cd0b570,[NOT READABLE] 0xffff94895cd0b700,[NOT READABLE] 0xffff94895cd0b890,\Windows\System32\svchost.exe 0xffff94895cd0ba20,\Windows\System32\wevtsvc.dll 0xffff94895cd0bbb0,\Windows\System32\en-US\d2d1.dll.mui 0xffff94895cd0bd40,\$Directory 0xffff94895cd0bed0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd0c1f0,[NOT READABLE] 0xffff94895cd0c380,[NOT READABLE] 0xffff94895cd0c510,[NOT READABLE] 0xffff94895cd0c6a0,\Windows\System32\umrdp.dll 0xffff94895cd0c830,[NOT READABLE] 0xffff94895cd0c9c0,\Windows\System32\en-US\umrdp.dll.mui 0xffff94895cd0cb50,\Windows\System32\netjoin.dll 0xffff94895cd0cce0,[NOT READABLE] 0xffff94895cd0ce70,[NOT A VALID _UNICODE_STRING] 0xffff94895cd0d190,[NOT READABLE] 0xffff94895cd0d320,[NOT READABLE] 0xffff94895cd0d4b0,[NOT A VALID _UNICODE_STRING] 0xffff94895cd0d640,\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 0xffff94895cd0d7d0,[NOT READABLE] 0xffff94895cd0d960,\$Directory 0xffff94895cd0daf0,[NOT READABLE] 0xffff94895cd0dc80,\Windows\System32\cabinet.dll 0xffff94895cd0de10,\Windows\System32\wevtapi.dll 0xffff94895cd0e130,[NOT READABLE] 0xffff94895cd0e2c0,\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx 0xffff94895cd0e450,[NOT READABLE] 0xffff94895cd0e5e0,[NOT READABLE] 0xffff94895cd0e770,[NOT READABLE] 0xffff94895cd0e900,[NOT READABLE] 0xffff94895cd0ea90,[NOT READABLE] 0xffff94895cd0ec20,[NOT A VALID _UNICODE_STRING] 0xffff94895cd0edb0,[NOT READABLE] 0xffff94895cd0f0d0,\Windows\System32 0xffff94895cd0f260,[NOT READABLE] 0xffff94895cd0f580,[NOT READABLE] 0xffff94895cd0f710,\Windows\System32\svchost.exe 0xffff94895cd0f8a0,[NOT READABLE] 0xffff94895cd0fa30,[NOT READABLE] 0xffff94895cd0fbc0,[NOT READABLE] 0xffff94895cd0fd50,\Windows\System32\svchost.exe 0xffff94895cd0fee0,\Windows\System32 0xffff94895cd10200,[NOT READABLE] 0xffff94895cd10390,[NOT READABLE] 0xffff94895cd10520,[NOT READABLE] 0xffff94895cd106b0,[NOT READABLE] 0xffff94895cd10840,[NOT READABLE] 0xffff94895cd109d0,[NOT READABLE] 0xffff94895cd10b60,[NOT READABLE] 0xffff94895cd10cf0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895cd10e80,[NOT READABLE] 0xffff94895cd111a0,[NOT READABLE] 0xffff94895cd11330,\Windows\System32\usermgr.dll 0xffff94895cd114c0,[NOT READABLE] 0xffff94895cd11650,[NOT READABLE] 0xffff94895cd117e0,[NOT READABLE] 0xffff94895cd11970,\Windows\System32\Windows.StateRepositoryClient.dll 0xffff94895cd11b00,[NOT READABLE] 0xffff94895cd11c90,\Windows\System32 0xffff94895cd11e20,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce02100,\Windows\System32\wmsgapi.dll 0xffff94895ce02290,[NOT READABLE] 0xffff94895ce02420,\Windows\System32\UserMgrLog.etl 0xffff94895ce025b0,[NOT READABLE] 0xffff94895ce02740,[NOT READABLE] 0xffff94895ce028d0,\Windows\System32\WinSCard.dll 0xffff94895ce02a60,[NOT READABLE] 0xffff94895ce02bf0,[NOT READABLE] 0xffff94895ce030a0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce03230,\$Directory 0xffff94895ce033c0,\Windows\System32\winevt\Logs\System.evtx 0xffff94895ce03550,\Windows\System32\winevt\Logs\Application.evtx 0xffff94895ce036e0,\Windows\System32\winevt\Logs\Security.evtx 0xffff94895ce03870,\Windows\System32\winevt\Logs\Internet Explorer.evtx 0xffff94895ce03a00,[NOT READABLE] 0xffff94895ce03b90,[NOT READABLE] 0xffff94895ce03d20,\Windows\System32\policymanager.dll 0xffff94895ce03eb0,[NOT READABLE] 0xffff94895ce041d0,[NOT READABLE] 0xffff94895ce04360,\Windows\System32\certprop.dll 0xffff94895ce044f0,[NOT READABLE] 0xffff94895ce04680,[NOT READABLE] 0xffff94895ce04810,[NOT READABLE] 0xffff94895ce049a0,\Windows\System32\dhcpcore.dll 0xffff94895ce04e50,\Windows\System32\winevt\Logs\HardwareEvents.evtx 0xffff94895ce05170,\Windows\System32\taskhostw.exe 0xffff94895ce05300,\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx 0xffff94895ce05490,\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx 0xffff94895ce05620,\Windows\System32\winevt\Logs\Key Management Service.evtx 0xffff94895ce057b0,\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx 0xffff94895ce05940,\Windows\System32\drivers\storport.sys 0xffff94895ce05ad0,\Windows\System32\drivers\ntfs.sys 0xffff94895ce05c60,\Windows\System32\drivers\volsnap.sys 0xffff94895ce05df0,\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx 0xffff94895ce06110,\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx 0xffff94895ce062a0,\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx 0xffff94895ce06430,\Windows\System32\en-US\certprop.dll.mui 0xffff94895ce065c0,\Windows\System32\winevt\Logs\Windows PowerShell.evtx 0xffff94895ce06750,\Windows\System32\webauthn.dll 0xffff94895ce068e0,\Windows\System32\drivers\fltMgr.sys 0xffff94895ce06a70,[NOT READABLE] 0xffff94895ce06c00,\Windows\System32\microsoft-windows-kernel-power-events.dll 0xffff94895ce06d90,\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx 0xffff94895ce070b0,\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx 0xffff94895ce07240,\Windows\System32\PSHED.DLL 0xffff94895ce073d0,\Windows\System32\ci.dll 0xffff94895ce07560,\Windows\System32\drivers\partmgr.sys 0xffff94895ce076f0,\Windows\System32\winevt\Logs\Windows Azure.evtx 0xffff94895ce07880,[NOT READABLE] 0xffff94895ce07a10,\Windows\System32\svchost.exe 0xffff94895ce07ba0,\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx 0xffff94895ce07d30,\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx 0xffff94895ce07ec0,\Windows\System32\microsoft-windows-system-events.dll 0xffff94895ce081e0,\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx 0xffff94895ce08370,\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx 0xffff94895ce08500,\Windows\System32\dhcpcore6.dll 0xffff94895ce08690,\Windows\System32\winnsi.dll 0xffff94895ce08820,\Windows\System32\samcli.dll 0xffff94895ce089b0,[NOT READABLE] 0xffff94895ce08b40,\Windows\System32\microsoft-windows-kernel-processor-power-events.dll 0xffff94895ce08cd0,\Windows\System32\netprofmsvc.dll 0xffff94895ce08e60,\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx 0xffff94895ce09180,\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx 0xffff94895ce09310,\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx 0xffff94895ce094a0,\Windows\System32\upfc.exe 0xffff94895ce09630,\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx 0xffff94895ce097c0,\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx 0xffff94895ce09950,\Windows\System32\wcmsvc.dll 0xffff94895ce09ae0,\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx 0xffff94895ce09c70,\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx 0xffff94895ce09e00,\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx 0xffff94895ce0a120,\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx 0xffff94895ce0a2b0,\Windows\System32\adtschema.dll 0xffff94895ce0a440,\Windows\System32\wpncore.dll 0xffff94895ce0a5d0,\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx 0xffff94895ce0a760,\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx 0xffff94895ce0a8f0,\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx 0xffff94895ce0aa80,\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx 0xffff94895ce0ac10,\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx 0xffff94895ce0ada0,[NOT READABLE] 0xffff94895ce0b0c0,\Windows\System32 0xffff94895ce0b250,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce0b3e0,\Windows\System32\Windows.StateRepository.dll 0xffff94895ce0b570,[NOT READABLE] 0xffff94895ce0b700,\Windows\System32\version.dll 0xffff94895ce0ba20,\Windows\System32 0xffff94895ce0bbb0,[NOT READABLE] 0xffff94895ce0bd40,\Windows\System32\dsparse.dll 0xffff94895ce0bed0,[NOT READABLE] 0xffff94895ce0c1f0,\Windows\System32\TaskApis.dll 0xffff94895ce0c380,\Windows\System32\svchost.exe 0xffff94895ce0c510,[NOT READABLE] 0xffff94895ce0c6a0,\Windows\System32\wkssvc.dll 0xffff94895ce0c830,[NOT READABLE] 0xffff94895ce0c9c0,[NOT READABLE] 0xffff94895ce0cb50,\Windows\System32\StateRepository.Core.dll 0xffff94895ce0cce0,\Windows\System32\AppXDeploymentClient.dll 0xffff94895ce0ce70,\Windows\System32\UserMgrProxy.dll 0xffff94895ce0d190,[NOT READABLE] 0xffff94895ce0d320,[NOT READABLE] 0xffff94895ce0d4b0,\Users\User\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 0xffff94895ce0d7d0,\Windows\System32\mpr.dll 0xffff94895ce0d960,[NOT READABLE] 0xffff94895ce0daf0,\Windows\System32\svchost.exe 0xffff94895ce0de10,\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\{AAEFBF30-3296-4663-B06E-E1DE5404F81C}.catalogItem 0xffff94895ce0e130,[NOT READABLE] 0xffff94895ce0e2c0,[NOT READABLE] 0xffff94895ce0e450,\Windows\System32\drivers\en-US\ndis.sys.mui 0xffff94895ce0e5e0,\Windows\System32\VBoxService.exe 0xffff94895ce0e770,[NOT READABLE] 0xffff94895ce0e900,[NOT READABLE] 0xffff94895ce0ea90,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce0ec20,[NOT READABLE] 0xffff94895ce0edb0,\Windows\System32\VBoxControl.exe 0xffff94895ce0f0d0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce0f260,\Windows\SysWOW64\MFMediaEngine.dll 0xffff94895ce0f3f0,\Windows\System32 0xffff94895ce0f580,\Windows\System32 0xffff94895ce0f710,\Windows\System32\VBoxHook.dll 0xffff94895ce0f8a0,\Windows\System32\VBoxTray.exe 0xffff94895ce0fa30,[NOT READABLE] 0xffff94895ce0fbc0,[NOT A VALID _UNICODE_STRING] 0xffff94895ce0fd50,\Windows\System32 0xffff94895ce0fee0,\Windows\System32\svchost.exe 0xffff94895ce10200,[NOT READABLE] 0xffff94895ce10390,\Windows\System32\wpdbusenum.dll 0xffff94895ce10520,\Windows\System32\svchost.exe 0xffff94895ce106b0,[NOT READABLE] 0xffff94895ce10840,[NOT READABLE] 0xffff94895ce109d0,\Windows\System32\dhcpcsvc6.dll 0xffff94895ce10b60,\Windows\System32\PortableDeviceConnectApi.dll 0xffff94895ce10cf0,\Windows\System32\PortableDeviceApi.dll 0xffff94895ce10e80,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce111a0,\Windows\System32 0xffff94895ce11330,\Windows\System32\dhcpcsvc.dll 0xffff94895ce114c0,[NOT READABLE] 0xffff94895ce11650,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce117e0,\Windows\System32\svchost.exe 0xffff94895ce11970,[NOT READABLE] 0xffff94895ce11b00,\Windows\System32\VBoxMRXNP.dll 0xffff94895ce11c90,\Windows\System32\drivers\VBoxGuest.sys 0xffff94895ce11e20,\Windows\SysWOW64\VBoxOGL-x86.dll 0xffff94895ce79e50,[NOT READABLE] 0xffff94895ce7a6f0,\Windows\System32\drivers\rspndr.sys 0xffff94895ce7a860,\Windows\System32\drivers\vmswitch.sys 0xffff94895ce7b270,[NOT READABLE] 0xffff94895ce7bdf0,\Windows\System32\drivers\lltdio.sys 0xffff94895ce7c240,\Windows\System32\drivers\mslldp.sys 0xffff94895ce7c520,\Windows\System32\drivers\wanarp.sys 0xffff94895ce7f8e0,[NOT READABLE] 0xffff94895ce7fbc0,[NOT READABLE] 0xffff94895ce7fd30,[NOT READABLE] 0xffff94895ce805d0,[NOT READABLE] 0xffff94895ce80740,[NOT READABLE] 0xffff94895ce808b0,[NOT READABLE] 0xffff94895ce80d00,[NOT READABLE] 0xffff94895ce80e70,[NOT READABLE] 0xffff94895ce81430,[NOT READABLE] 0xffff94895ce81710,[NOT READABLE] 0xffff94895ce81880,[NOT READABLE] 0xffff94895ce819f0,[NOT READABLE] 0xffff94895ce81cd0,[NOT READABLE] 0xffff94895ce81e40,[NOT READABLE] 0xffff94895ce82120,[NOT READABLE] 0xffff94895ce82400,[NOT READABLE] 0xffff94895ce82570,[NOT READABLE] 0xffff94895ce826e0,[NOT READABLE] 0xffff94895ce82850,[NOT READABLE] 0xffff94895ce829c0,[NOT READABLE] 0xffff94895ce82b30,[NOT READABLE] 0xffff94895ce82ca0,[NOT READABLE] 0xffff94895ce82e10,[NOT READABLE] 0xffff94895ce830f0,[NOT READABLE] 0xffff94895ce83260,[NOT READABLE] 0xffff94895ce833d0,[NOT READABLE] 0xffff94895ce83540,[NOT READABLE] 0xffff94895ce836b0,[NOT READABLE] 0xffff94895ce83820,[NOT READABLE] 0xffff94895ce83990,[NOT READABLE] 0xffff94895ce83b00,[NOT READABLE] 0xffff94895ce83c70,[NOT READABLE] 0xffff94895ce83de0,[NOT READABLE] 0xffff94895ce85100,[NOT READABLE] 0xffff94895ce85290,[NOT A VALID _UNICODE_STRING] 0xffff94895ce85420,\$Directory 0xffff94895ce855b0,[NOT READABLE] 0xffff94895ce85740,\Windows\System32\themeservice.dll 0xffff94895ce858d0,[NOT READABLE] 0xffff94895ce85a60,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce85bf0,\Windows\System32\winhttp.dll 0xffff94895ce85d80,[NOT READABLE] 0xffff94895ce860a0,\Windows\System32\WaaSMedicSvc.dll 0xffff94895ce86230,\Windows\Prefetch\SVCHOST.EXE-342BD74A.pf 0xffff94895ce863c0,\Windows\System32\FWPUCLNT.DLL 0xffff94895ce86550,\Windows\System32\secur32.dll 0xffff94895ce866e0,\Windows\System32 0xffff94895ce86870,\Windows\System32\dnsrslvr.dll 0xffff94895ce86a00,\Users\User\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4 0xffff94895ce86b90,[NOT READABLE] 0xffff94895ce86d20,\Windows\System32\ssdpapi.dll 0xffff94895ce86eb0,\$Directory 0xffff94895ce871d0,\Windows\System32\sysmain.dll 0xffff94895ce87360,\$Directory 0xffff94895ce874f0,\Windows\System32\svchost.exe 0xffff94895ce87680,[NOT READABLE] 0xffff94895ce87810,[NOT READABLE] 0xffff94895ce879a0,\Windows\System32\es.dll 0xffff94895ce87b30,[NOT READABLE] 0xffff94895ce87cc0,\Windows\System32\nlasvc.dll 0xffff94895ce87e50,\Windows\System32\ncsi.dll 0xffff94895ce88170,[NOT READABLE] 0xffff94895ce88300,[NOT READABLE] 0xffff94895ce88490,\Windows\System32\WaaSMedicPS.dll 0xffff94895ce88620,\$Directory 0xffff94895ce887b0,\Windows\System32\WaaSMedicPS.dll 0xffff94895ce88940,\Windows\System32\DismApi.dll 0xffff94895ce88ad0,[NOT READABLE] 0xffff94895ce88c60,[NOT READABLE] 0xffff94895ce88df0,\Windows\System32\svchost.exe 0xffff94895ce89110,[NOT READABLE] 0xffff94895ce892a0,[NOT READABLE] 0xffff94895ce89430,[NOT READABLE] 0xffff94895ce895c0,[NOT READABLE] 0xffff94895ce89750,\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx 0xffff94895ce898e0,\Windows\System32\comres.dll 0xffff94895ce89a70,[NOT READABLE] 0xffff94895ce89c00,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce89d90,\Windows\System32 0xffff94895ce8a0b0,\Windows\System32\svchost.exe 0xffff94895ce8a240,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce8a3d0,\Windows\System32\drivers\etc 0xffff94895ce8a560,\Windows\System32 0xffff94895ce8a6f0,\Windows\System32\SessEnv.dll 0xffff94895ce8a880,[NOT READABLE] 0xffff94895ce8aa10,\Windows\System32\Sens.dll 0xffff94895ce8aba0,[NOT READABLE] 0xffff94895ce8ad30,[NOT READABLE] 0xffff94895ce8aec0,\Windows\System32\svchost.exe 0xffff94895ce8b1e0,\Windows\SystemResources\comres.dll.mun 0xffff94895ce8b370,[NOT READABLE] 0xffff94895ce8b500,[NOT READABLE] 0xffff94895ce8b690,\Windows\System32 0xffff94895ce8b820,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce8b9b0,[NOT READABLE] 0xffff94895ce8bb40,[NOT READABLE] 0xffff94895ce8bcd0,\Windows\System32 0xffff94895ce8be60,[NOT READABLE] 0xffff94895ce8c180,\Windows\System32 0xffff94895ce8c310,\$Directory 0xffff94895ce8c4a0,[NOT READABLE] 0xffff94895ce8c630,\Windows\System32\svchost.exe 0xffff94895ce8c7c0,[NOT READABLE] 0xffff94895ce8c950,[NOT READABLE] 0xffff94895ce8cae0,[NOT READABLE] 0xffff94895ce8cc70,\Windows\System32\FntCache.dll 0xffff94895ce8ce00,[NOT READABLE] 0xffff94895ce8d120,\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20200.0_x64__8wekyb3d8bbwe\en-us\hxcommintl.dll 0xffff94895ce8d2b0,[NOT A VALID _UNICODE_STRING] 0xffff94895ce8d440,\Windows\System32\Microsoft\Protect\S-1-5-18\9eb69274-6978-4b47-971e-3a4f3f055676 0xffff94895ce8d5d0,\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_373ee86b-ec20-4082-94ac-039dcac01c17 0xffff94895ce8d760,\Windows\System32\FontProvider.dll 0xffff94895ce8d8f0,\Windows\System32\en-US\crypt32.dll.mui 0xffff94895ce8da80,[NOT READABLE] 0xffff94895ce8dc10,\$Directory 0xffff94895ce8dda0,\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat 0xffff94895ce8e0c0,\Windows\System32\en-US\ShutdownUX.dll.mui 0xffff94895ce8e250,\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-System.dat 0xffff94895ce8e3e0,\Windows\Fonts 0xffff94895ce8e570,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce8e700,\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db 0xffff94895ce8e890,\Windows\System32\en-US\propsys.dll.mui 0xffff94895ce8ea20,[NOT READABLE] 0xffff94895ce8ebb0,[NOT READABLE] 0xffff94895ce8ed40,[NOT A VALID _UNICODE_STRING] 0xffff94895ce8eed0,\Windows\System32\OnDemandConnRouteHelper.dll 0xffff94895ce8f1f0,[NOT READABLE] 0xffff94895ce8f380,\Windows\System32\BFE.DLL 0xffff94895ce8f510,\Windows\System32 0xffff94895ce8f6a0,\Windows\System32\en-US\bfe.dll.mui 0xffff94895ce8f830,\Users\User\AppData\Roaming\Code\CachedData\5763d909d5f12fe19f215cbfdd29a91c0fa9208a\index-2a7e7a6cb463b94d8bffe4bbc26ebc24.code 0xffff94895ce8f9c0,[NOT READABLE] 0xffff94895ce8fb50,[NOT READABLE] 0xffff94895ce8fce0,\$Directory 0xffff94895ce90190,\ProgramData\Microsoft\Windows\Caches\cversions.2.db 0xffff94895ce90320,\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db 0xffff94895ce904b0,[NOT READABLE] 0xffff94895ce90640,\Windows\System32\Windows.UI.Xaml.InkControls.dll 0xffff94895ce907d0,[NOT READABLE] 0xffff94895ce90960,\$Directory 0xffff94895ce90af0,[NOT READABLE] 0xffff94895ce90c80,\Windows\System32\en-US\MMDevAPI.dll.mui 0xffff94895ce90e10,\Windows\System32\Windows.UI.Xaml.Controls.dll 0xffff94895ce91130,[NOT READABLE] 0xffff94895ce912c0,[NOT READABLE] 0xffff94895ce91450,\Windows\System32\svchost.exe 0xffff94895ce915e0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce91770,\$Directory 0xffff94895ce91900,[NOT READABLE] 0xffff94895ce91a90,[NOT READABLE] 0xffff94895ce91c20,\Windows\System32\dxgiadaptercache.exe 0xffff94895ce91db0,\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx 0xffff94895ce920d0,[NOT READABLE] 0xffff94895ce92260,[NOT READABLE] 0xffff94895ce923f0,\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx 0xffff94895ce92580,[NOT READABLE] 0xffff94895ce92710,[NOT READABLE] 0xffff94895ce928a0,[NOT READABLE] 0xffff94895ce92a30,\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx 0xffff94895ce92bc0,\Windows\System32\vssapi.dll 0xffff94895ce92d50,\Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx 0xffff94895ce92ee0,\Windows\System32\drivers\etc\hosts 0xffff94895ce93200,\Windows\System32\en-US\FirewallAPI.dll.mui 0xffff94895ce93390,\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx 0xffff94895ce93520,\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx 0xffff94895ce936b0,[NOT READABLE] 0xffff94895ce93840,[NOT READABLE] 0xffff94895ce939d0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895ce93b60,[NOT READABLE] 0xffff94895ce93cf0,\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx 0xffff94895ce93e80,\Windows\System32\en-US\netprofmsvc.dll.mui 0xffff94895ce941a0,\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx 0xffff94895ce94330,\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Audit.evtx 0xffff94895ce944c0,\Windows\System32\en-US\AudioEndpointBuilder.dll.mui 0xffff94895ce94650,\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx 0xffff94895ce947e0,[NOT READABLE] 0xffff94895ce94970,\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx 0xffff94895ce94b00,\Windows\System32 0xffff94895ce94c90,\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx 0xffff94895ce94e20,\Windows\System32\svchost.exe 0xffff94895e002100,[NOT READABLE] 0xffff94895e002290,\Windows\System32\audiodg.exe 0xffff94895e002420,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e0025b0,[NOT READABLE] 0xffff94895e002740,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e002a60,\Windows\System32\en-US\AudioSrv.dll.mui 0xffff94895e002bf0,[NOT READABLE] 0xffff94895e002d80,\Windows\System32\HrtfApo.dll 0xffff94895e0030a0,[NOT READABLE] 0xffff94895e003230,\Windows\System32\CompPkgSup.dll 0xffff94895e0033c0,[NOT READABLE] 0xffff94895e003550,[NOT READABLE] 0xffff94895e0036e0,[NOT READABLE] 0xffff94895e003870,[NOT READABLE] 0xffff94895e003a00,[NOT READABLE] 0xffff94895e003b90,\Windows\System32\svchost.exe 0xffff94895e003d20,[NOT READABLE] 0xffff94895e003eb0,[NOT READABLE] 0xffff94895e0041d0,[NOT READABLE] 0xffff94895e004360,\Windows\System32\audiosrv.dll 0xffff94895e0044f0,\Windows\System32\coreaudiopolicymanagerext.dll 0xffff94895e004680,\Windows\System32\AudioSrvPolicyManager.dll 0xffff94895e004810,[NOT READABLE] 0xffff94895e0049a0,\Windows\System32 0xffff94895e004b30,[NOT READABLE] 0xffff94895e004cc0,\Windows\System32\Windows.Media.Devices.dll 0xffff94895e004e50,[NOT READABLE] 0xffff94895e005170,[NOT READABLE] 0xffff94895e005300,\Windows\System32\npmproxy.dll 0xffff94895e005490,\Windows\System32\svchost.exe 0xffff94895e005620,[NOT A VALID _UNICODE_STRING] 0xffff94895e0057b0,\Windows\System32\svchost.exe 0xffff94895e005940,\Windows\System32\GroupPolicy\gpt.ini 0xffff94895e005ad0,[NOT READABLE] 0xffff94895e005c60,\Windows\System32\dusmsvc.dll 0xffff94895e005df0,\Windows\System32\svchost.exe 0xffff94895e006110,\Windows\System32 0xffff94895e0062a0,[NOT READABLE] 0xffff94895e006430,\Windows\System32 0xffff94895e0068e0,\Windows\System32\en-US\gpsvc.dll.mui 0xffff94895e006a70,\Windows\System32\en-US\audiodg.exe.mui 0xffff94895e006c00,\Windows\System32\mobilenetworking.dll 0xffff94895e0070b0,[NOT READABLE] 0xffff94895e007240,[NOT READABLE] 0xffff94895e0073d0,\Windows\System32 0xffff94895e007560,\Users\User\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\BE8B021F9E811DFC8C8A28572A17C05A_2863B8DFBF96CBD14BC361AA15F6AAB6 0xffff94895e0076f0,\$Directory 0xffff94895e007880,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e007a10,\Windows\System32\svchost.exe 0xffff94895e007ba0,\Windows\System32 0xffff94895e007ec0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e0081e0,[NOT READABLE] 0xffff94895e008370,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e008500,\Windows\System32\en-US\LogonController.dll.mui 0xffff94895e008690,\$Directory 0xffff94895e008820,\Windows\System32\BCP47Langs.dll 0xffff94895e0089b0,\Windows\System32\WMALFXGFXDSP.dll 0xffff94895e008b40,\Windows\System32\svchost.exe 0xffff94895e008cd0,\Windows\System32\Windows.UI.dll 0xffff94895e008e60,\Windows\System32\Windows.UI.XamlHost.dll 0xffff94895e009180,[NOT A VALID _UNICODE_STRING] 0xffff94895e009310,\Windows\System32\TextInputFramework.dll 0xffff94895e0094a0,\Windows\System32\InputHost.dll 0xffff94895e009630,[NOT READABLE] 0xffff94895e0097c0,\Windows\System32\Windows.UI.Logon.dll 0xffff94895e009950,\Windows\System32\svchost.exe 0xffff94895e009ae0,\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd 0xffff94895e009c70,\Windows\System32\wincorlib.dll 0xffff94895e009e00,\Windows\System32\MrmCoreR.dll 0xffff94895e00a120,\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd 0xffff94895e00a2b0,\Windows\SystemResources\Windows.UI.Logon\Windows.UI.Logon.pri 0xffff94895e00a440,\Windows\System32\LanguageOverlayUtil.dll 0xffff94895e00a5d0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e00a760,\Windows\rescache\_merged\3162064442\2350453880.pri 0xffff94895e00a8f0,[NOT A VALID _UNICODE_STRING] 0xffff94895e00aa80,\Windows\System32\security.dll 0xffff94895e00ac10,\$Directory 0xffff94895e00ada0,\Windows\System32\Syncreg.dll 0xffff94895e00b0c0,\Windows\System32\sensrsvc.dll 0xffff94895e00b250,\Windows\System32\ActionCenter.dll 0xffff94895e00b3e0,\Windows\System32\svchost.exe 0xffff94895e00b570,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e00b700,\Windows\SoftwareDistribution\DataStore\DataStore.edb 0xffff94895e00b890,\$Directory 0xffff94895e00ba20,\$Directory 0xffff94895e00bbb0,[NOT A VALID _UNICODE_STRING] 0xffff94895e00bd40,[NOT A VALID _UNICODE_STRING] 0xffff94895e00bed0,\$Directory 0xffff94895e00c1f0,\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm 0xffff94895e00c380,\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\IDE\PrivateAssemblies\StanCore.dll 0xffff94895e00c510,[NOT READABLE] 0xffff94895e00c6a0,\Windows\System32\iertutil.dll 0xffff94895e00c830,\Windows\System32 0xffff94895e00c9c0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e00cb50,\$Directory 0xffff94895e00cce0,\Windows\System32\Windows.UI.Immersive.dll 0xffff94895e00ce70,\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx 0xffff94895e00d190,\Windows\System32\Windows.Storage.Search.dll 0xffff94895e00d320,\Windows\System32\Windows.UI.Xaml.dll 0xffff94895e00d4b0,[NOT READABLE] 0xffff94895e00d640,\$Directory 0xffff94895e00d7d0,[NOT READABLE] 0xffff94895e00d960,\$Directory 0xffff94895e00daf0,[NOT READABLE] 0xffff94895e00dc80,\Windows\SystemResources\Windows.UI.ShellCommonInetCore\Windows.UI.ShellCommonInetCore.pri 0xffff94895e00de10,\Windows\System32\dosvc.dll 0xffff94895e00e130,[NOT READABLE] 0xffff94895e00e2c0,\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20200604_062038_413.etl 0xffff94895e00e450,\Windows\System32\en-US\ESENT.dll.mui 0xffff94895e00e5e0,[NOT READABLE] 0xffff94895e00e770,\Windows\System32\BCP47mrm.dll 0xffff94895e00e900,[NOT READABLE] 0xffff94895e00ea90,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e00ec20,\Windows\System32\urlmon.dll 0xffff94895e00edb0,\Windows\System32\en-US\svchost.exe.mui 0xffff94895e00f0d0,[NOT READABLE] 0xffff94895e00f260,\Windows\System32\wshhyperv.dll 0xffff94895e00f3f0,\Windows\System32\msidle.dll 0xffff94895e00f580,[NOT READABLE] 0xffff94895e00f710,[NOT READABLE] 0xffff94895e00f8a0,[NOT READABLE] 0xffff94895e00fa30,\Windows\System32\Windows.Globalization.dll 0xffff94895e00fbc0,[NOT READABLE] 0xffff94895e00fd50,\Windows\System32\Windows.UI.Xaml.Phone.dll 0xffff94895e00fee0,\$Directory 0xffff94895e010200,[NOT READABLE] 0xffff94895e010390,\Windows\SysWOW64\AppXDeploymentClient.dll 0xffff94895e010520,\Windows\SysWOW64\FirewallAPI.dll 0xffff94895e0106b0,\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll 0xffff94895e010840,[NOT READABLE] 0xffff94895e0109d0,[NOT READABLE] 0xffff94895e010b60,\Windows\System32 0xffff94895e010cf0,[NOT READABLE] 0xffff94895e010e80,\Windows\System32\DWrite.dll 0xffff94895e0111a0,[NOT READABLE] 0xffff94895e011330,\Windows\System32\Windows.UI.Xaml.Maps.dll 0xffff94895e0114c0,\Windows\System32\fhsvc.dll 0xffff94895e011650,\Windows\System32\en-US\KernelBase.dll.mui 0xffff94895e0117e0,\Windows\System32\directmanipulation.dll 0xffff94895e011970,\Windows\System32\svchost.exe 0xffff94895e011b00,[NOT READABLE] 0xffff94895e011c90,[NOT READABLE] 0xffff94895e011e20,"fÞ